Packages / Debian 13 (Trixie) / Source / ocaml / ocaml-mirage-crypto
simple symmetric cryptography for the modern age (runtime)
cryptography in OCaml for the modern age (dev)
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-87737] Published: An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend | Medium(5.9) | AffectedDetails (4)
|
| [CVE-2026-87736] Published: An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. | Medium(4.3) | AffectedDetails (4)
|
| [CVE-2026-87735] Published: An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption. | Medium(4.3) | AffectedDetails (4)
|
| [CVE-2026-87733] Published: An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public | Medium(6.2) | AffectedDetails (4)
|
| [CVE-2026-87732] Published: An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a | Medium(6.2) | AffectedDetails (4)
|
Last synced:
Authoritative source; repository metadata signature verified
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Authoritative source; repository metadata signature verified
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908