Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-eu3v-wzxr-pbd3
|
Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. The issue was discovered using Google's oss-fuzz.
|
CVE-2023-29479
|
|
VCID-t2ak-y8du-pfft
|
librnp uses weak random number generation such that generated keys can be easily cracked.
|
CVE-2025-13470
|
|
VCID-w7s3-7ab3-xyeb
|
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.
|
CVE-2023-29480
|
|
VCID-x486-a1u1-jqau
|
Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm.
|
CVE-2021-33589
|