rpm package
suse/liboqs&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6
pkg:rpm/suse/liboqs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-54137 | — | < 0.12.0-150600.3.3.1 | 0.12.0-150600.3.3.1 | Dec 6, 2024 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is | ||
| CVE-2024-37305 | Hig | 8.2 | < 0.12.0-150600.3.3.1 | 0.12.0-150600.3.3.1 | Jun 17, 2024 | oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODE_UINT32 at | |
| CVE-2024-36405 | — | < 0.12.0-150600.3.3.1 | 0.12.0-150600.3.3.1 | Jun 10, 2024 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for `-O |
- CVE-2024-54137Dec 6, 2024affected < 0.12.0-150600.3.3.1fixed 0.12.0-150600.3.3.1
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is
- affected < 0.12.0-150600.3.3.1fixed 0.12.0-150600.3.3.1
oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODE_UINT32 at
- CVE-2024-36405Jun 10, 2024affected < 0.12.0-150600.3.3.1fixed 0.12.0-150600.3.3.1
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for `-O