This update for snpguest fixes the following issues:
Update to version 0.10.0.
Security issues fixed:
- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927).
- CVE-2025-3416: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242601).
- CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bcs#1243869).
Other updates and bugfixes:
-
Update to version 0.10.0
- fails to generate attestation reports on SEV-SNP guests with firmware API (bsc#1257877).
- chore: updating tool version to 0.10.0
- refactor(certs): remove redundant branch in file-write logic
- Docs: Adding verify measure, host-data, report-data to docs
- verify: verify measurent, host data, and report data attributes from the attestation report.
- library: Updating sev library to 7.1.0
- ci: replace deprecated gh actions
- feat: multi-format integer parsing for key subcommand arguments
- chore(main): remove unused import
clap::arg
- feat(fetch): add fetch crl subcommand
- .github/lint: Bump toolchain version to 1.86
- Bump rust version to 1.86
- feat: bumping tool to version 0.9.2
- fix(verify): silence mismatched_lifetime_syntaxes in SnpOid::oid
- feat: support SEV-SNP ABI Spec 1.58 (bump sev to v6.3.0)
- docs: restore and clarify Global Options section
- doc: fix CL argument orders + address recent changes
- fix(hyperv): downgrade VMPL check from error to warning
- fix(report.rs): remove conflict check between --random flag and Hyper-V
- fix(report.rs): Decouple runtime behavior from hyperv build feature
- refactor: clarify --platform error message
- docs: add Azure/Hyper-V build note for --platform
- report: Writing Req Data as Binary (#101)
- deps: bump virtee/sev to 6.2.1 (fix TCB-serialization bug) (#99)
- Updating SEV library to 6.1.0 and updating version to 0.9.1
- Update version (0.9.0)
*...