openSUSE-SU-2026:20770-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20770-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:20770-1
Upstream
Related
Published
2026-05-19T14:15:05Z
Modified
2026-05-22T18:24:21.113699284Z
Summary
Security update for git-bug
Details

This update for git-bug fixes the following issues:

Changes in git-bug:

  • CVE-2026-1229: CIRCL had an incorrect calculation in secp384r1 CombinedMult (bsc#1265416, GO-2026-4550): updated github.com/cloudflare/circl to v1.6.3
  • CVE-2026-41506: HTTP authentication credential leak when following redirects during smart-HTTP clone and fetch operations (bsc#1264955, GO-2026-4910): updated github.com/go-git/go-git/v5 to v5.17.1
References

Affected packages