High · 7.5 CVE-2021-33589 EUVD-2021-20274GHSA-85rv-559q-9c4r

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of…

Published Apr 21, 2023 · Updated Feb 4, 2025 · Assigned by mitre

Package: rnp Package: rnp Ecosystem: Debian Ecosystem: Ubuntu

Description

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	rnp	0.15.1-1	—
Debian 13	rnp	0.15.1-1	—
Debian 12	rnp	0.15.1-1	—

Ubuntu