rpm package
opensuse/liboqs&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/liboqs&distro=openSUSE%20Tumbleweed
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-46344 | Med | 5.3 | < 0.16.0-2.1 | 0.16.0-2.1 | May 29, 2026 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called wi | |
| CVE-2025-52473 | Med | 5.9 | < 0.14.0-1.1 | 0.14.0-1.1 | Jul 10, 2025 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for op | |
| CVE-2024-54137 | Hig | 7.4 | < 0.12.0-1.1 | 0.12.0-1.1 | Dec 6, 2024 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is | |
| CVE-2024-36405 | Med | 5.9 | < 0.10.1-1.1 | 0.10.1-1.1 | Jun 10, 2024 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for `-O |
- affected < 0.16.0-2.1fixed 0.16.0-2.1
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT stateful signature verification code. When the verification function is called wi
- affected < 0.14.0-1.1fixed 0.14.0-1.1
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been identified in the reference implementation of the HQC key encapsulation mechanism when it is compiled with Clang for op
- affected < 0.12.0-1.1fixed 0.12.0-1.1
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is
- affected < 0.10.1-1.1fixed 0.10.1-1.1
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for `-O