Описание
Security update for enc
This update for enc fixes the following issues:
Changes in enc:
-
CVE-2026-1229: Fix incorrect value (bsc#1265533) Bump circl to 1.6.3
-
Update to 1.1.5:
- Update dependencies #10
-
Update to 1.1.4:
- Update all dependencies #9
Список пакетов
openSUSE Leap 16.0
enc-1.1.5-bp160.1.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1265533
- SUSE CVE CVE-2026-1229 page
Описание
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 .
Затронутые продукты
openSUSE Leap 16.0:enc-1.1.5-bp160.1.1
Ссылки
- CVE-2026-1229
- SUSE Bug 1265416