Packages / Debian 12 (Bookworm) / Source / ocaml / ocaml-mirage-crypto
simple symmetric cryptography for the modern age (runtime)
cryptography in OCaml for the modern age (dev)
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-87737] Published: An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend | Medium(5.9) | AffectedDetails (4)
|
| [CVE-2026-87736] Published: An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. | Medium(4.3) | AffectedDetails (4)
|
| [CVE-2026-87735] Published: An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption. | Medium(4.3) | AffectedDetails (4)
|
| [CVE-2026-87733] Published: An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public | Medium(6.2) | AffectedDetails (4)
|
| [CVE-2026-87732] Published: An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a | Medium(6.2) | AffectedDetails (4)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00