This update for leancrypto fixes the following issues
Security issue:
- CVE-2026-34610: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant
cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen to uint8_t when
stori (bsc#1261382).
Non security issues:
- gnutls Illegal instruction lc_kyber_768_kem_dec_selftest (bsc#1253654).
- gnutls: test pqc-hybrid-kx fails on Nehalem or older CPU (bsc#1254370).
Changes for leancrypto:
- Calculate the FIPS HMAC for the leancrypto and the leancrypto-fips
libraries. (bsc#1262399)
- Fix build on kernel 7.0
- Pick fix for ABI issue in AVX2 assembly for Curve448 causing
test failures when building with GCC 16.
- Update to 1.7.2:
* Fix RDSEED counter
* Process code by AI code checkers and apply suggested cosmetic fixes
* Heap memory: always munlock all mlock'ed memory
* Fix ChaCha20 on Apple compiled with XCode 26.4
* Fix a potential crasher with...
Read the Full Advisory- openSUSE Leap 16.0:
leancrypto-devel-1.7.2-160000.1.1
leancrypto-devel-static-1.7.2-160000.1.1
leancrypto-kmp-64kb-1.7.2_k6.12.0_160000.32-160000.1.1
leancrypto-kmp-default-1.7.2_k6.12.0_160000.32-160000.1.1
leancrypto-tools-1.7.2-160000.1.1
libleancrypto-fips1-1.7.2-160000.1.1
libleancrypto1-1.7.2-160000.1.1
* bsc#1253654
* bsc#1254370
* bsc#1261382
* bsc#1262399
References:
* https://www.suse.com/security/cve/CVE-2026-34610.html
Get the latest Linux and open source security news straight to your inbox.