Debian Patches

Status for libcrypto++/8.9.0-3

Patch Description Author Forwarded Bugs Origin Last update
fix_library_name.patch use crypto++ instead of cryptopp Laszlo Boszormenyi (GCS) <gcs@debian.org> not-needed 2023-10-01
update_gf2n_docs.patch Update docs Thanks to Bing Shi Jeffrey Walton <noloader@gmail.com> no 2023-11-19
CVE-2023-50980.patch Validate PolynomialMod2 coefficients Thanks to Bing Shi Jeffrey Walton <noloader@gmail.com> no 2023-11-20
fix_ChaCha_SIMD_feed-forward_carry.patch Fix ChaCha SIMD feed-forward carry (GH #1362, PR #1363)
The NEON, SSE2 and Altivec backends applied the per-block counter offset with a 64-bit add after the rounds. A carry from word 12 could therefore alter word 13 of the keystream.

Precompute each block's initial state, then use 32-bit feed-forward adds. Add regression vectors covering ChaCha8/12/20 and counter offsets 1, 2 and 3.

This matches the earlier AVX2 fix in GH #1069.
CoraleSoft <82213665+Coralesoft@users.noreply.github.com> no 2026-07-13

All known versions for source package 'libcrypto++'

Links