liboqs (SUSE:Linux Enterprise Module for Basesystem 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP6 package liboqs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2024-37305 — CVSS 8.2 (high): oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME…
• CVE-2024-54137 — CVSS 7.4 (high): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A correctness error has…
• CVE-2024-36405 — CVSS 5.9 (medium): liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing…