Package: libmirage-crypto-ocaml (0.10.7-1+b3) simple symmetric cryptography for the modern age (runtime) Other Packages Related to libmirage-crypto-ocaml: [libc6 ] (>= 2.25)
GNU C Library: Shared libraries
Package not available
Package not available
Package not available
Package not available
Package not available
Package not available
Package not available
Package not available
Package not available
Download libmirage-crypto-ocaml Package file paths (24) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/lib/ocaml/mirage-crypto-ec/META /usr/lib/ocaml/mirage-crypto-ec/mirage_crypto_ec.cma /usr/lib/ocaml/mirage-crypto-ec/mirage_crypto_ec.cmxs /usr/lib/ocaml/mirage-crypto/META /usr/lib/ocaml/mirage-crypto/mirage_crypto.cma /usr/lib/ocaml/mirage-crypto/mirage_crypto.cmxs /usr/lib/ocaml/mirage-crypto-pk/META /usr/lib/ocaml/mirage-crypto-pk/mirage_crypto_pk.cma /usr/lib/ocaml/mirage-crypto-pk/mirage_crypto_pk.cmxs /usr/lib/ocaml/mirage-crypto-rng/lwt/mirage_crypto_rng_lwt.cma /usr/lib/ocaml/mirage-crypto-rng/lwt/mirage_crypto_rng_lwt.cmxs /usr/lib/ocaml/mirage-crypto-rng/META /usr/lib/ocaml/mirage-crypto-rng/mirage_crypto_rng.cma /usr/lib/ocaml/mirage-crypto-rng/mirage_crypto_rng.cmxs /usr/lib/ocaml/mirage-crypto-rng/unix/mirage_crypto_rng_unix.cma /usr/lib/ocaml/mirage-crypto-rng/unix/mirage_crypto_rng_unix.cmxs /usr/lib/ocaml/stublibs/dllmirage_crypto_ec_stubs.so /usr/lib/ocaml/stublibs/dllmirage_crypto_rng_unix_stubs.so /usr/lib/ocaml/stublibs/dllmirage_crypto_stubs.so /usr/share/doc/libmirage-crypto-ocaml/changelog.Debian.amd64.gz /usr/share/doc/libmirage-crypto-ocaml/changelog.Debian.arm64.gz /usr/share/doc/libmirage-crypto-ocaml/changelog.Debian.gz /usr/share/doc/libmirage-crypto-ocaml/changelog.gz /usr/share/doc/libmirage-crypto-ocaml/copyright Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-87737 ] Published: Sep 9, 2026, 5:18:21 AM UTC
An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend
Medium(5.9) Affected Details (2) 0.10.7-1+b3 · amd64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
0.10.7-1+b3 · arm64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
[CVE-2026-87736 ] Published: Sep 9, 2026, 5:18:20 AM UTC
An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
Medium(4.3) Affected Details (2) 0.10.7-1+b3 · amd64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
0.10.7-1+b3 · arm64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
[CVE-2026-87735 ] Published: Sep 9, 2026, 5:18:20 AM UTC
An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption.
Medium(4.3) Affected Details (2) 0.10.7-1+b3 · amd64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
0.10.7-1+b3 · arm64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
[CVE-2026-87733 ] Published: Sep 9, 2026, 5:18:20 AM UTC
An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public
Medium(6.2) Affected Details (2) 0.10.7-1+b3 · amd64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
0.10.7-1+b3 · arm64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
[CVE-2026-87732 ] Published: Sep 9, 2026, 5:18:20 AM UTC
An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a
Medium(6.2) Affected Details (2) 0.10.7-1+b3 · amd64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
0.10.7-1+b3 · arm64 · bookworm
Affected
nvd · ocaml-mirage-crypto · debian · bookworm; nvd · ocaml-mirage-crypto · debian · 12
Last synced: Oct 28, 2026, 1:28:26 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
0.10.7-1+b3 / amd64 Observed Sep 1, 2026 sha256 4b9128cf46e3…92bb91cfSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 4b9128cf46e391a320b538eab44248e5f9676710df43400144ffb3ef92bb91cf
Verify download
printf '%s %s\n' '4b9128cf46e391a320b538eab44248e5f9676710df43400144ffb3ef92bb91cf' 'libmirage-crypto-ocaml_0.10.7-1+b3_amd64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
0.10.7-1+b3 / arm64 Observed Sep 1, 2026 sha256 d9d3196a1e9c…9791b3f8Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): d9d3196a1e9c593f7f5e76d70f9f7cf7291d0c1dac7d562ac1fd802f9791b3f8
Verify download
printf '%s %s\n' 'd9d3196a1e9c593f7f5e76d70f9f7cf7291d0c1dac7d562ac1fd802f9791b3f8' 'libmirage-crypto-ocaml_0.10.7-1+b3_arm64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
