Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2026-1229
updated 5 months ago by @LeSuisse Activity log
  • Created suggestion 5 months ago
  • @LeSuisse ignored
    10 packages
    • pscircle
    • libcircle
    • circle-flags
    • circleci-cli
    • pkgsRocm.libcircle
    • tela-circle-icon-theme
    • numix-icon-theme-circle
    • typstPackages.cross-circle
    • haskellPackages.circle-packing
    • typstPackages.cross-circle_1_0_0
    5 months ago
  • @LeSuisse dismissed 5 months ago
Incorrect calculation in CIRCL secp384r1 CombinedMult

The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 .

Affected products

CIRCL
  • <1.6.3
Ignored packages (10)

pkgs.pscircle

Visualize Linux processes in a form of a radial tree

pkgs.libcircle

API for distributing embarrassingly parallel workloads using self-stabilization

  • nixos-unstable 0.3
    • nixpkgs-unstable 0.3
    • nixos-unstable-small 0.3

pkgs.circle-flags

Collection of 400+ minimal circular SVG country and state flags

pkgs.circleci-cli

Command to enable you to reproduce the CircleCI environment locally and run jobs as if they were running on the hosted CirleCI application.

pkgs.pkgsRocm.libcircle

API for distributing embarrassingly parallel workloads using self-stabilization

  • nixos-unstable 0.3
    • nixpkgs-unstable 0.3
    • nixos-unstable-small 0.3

pkgs.typstPackages.cross-circle

A rather convoluted implementation of cross'n'circle (aka. tic tac toe). Customize it to your hearts content

Not directly present in nixpkgs