File _patchinfo of Package patchinfo
<patchinfo incident="18350">
<issue tracker="cve" id="2018-25099"/>
<issue tracker="bnc" id="1221528">VUL-0: CVE-2018-25099: perl-CryptX: gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag</issue>
<packager>lrupp</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for perl-CryptX</summary>
<description>This update for perl-CryptX fixes the following issues:
Updated to version 0.080:
0.080 2023-10-04
- fix #95 AES-NI troubles on MS Windows (gcc compiler)
- fix #96 Tests failure with Math::BigInt >= 1.999840
- Enabled AES-NI for platforms with gcc/clang/llvm
0.079 2023-10-01
- fix #92 update libtomcrypt
- bundled libtomcrypt update branch:develop (commit:1e629e6f 2023-06-22)
0.078 2023-04-28
- fix #89 Crypt::Mac::HMAC b64mac and b64umac object methods do not work
</description>
</patchinfo>