MidnightBSD

Advisories for ribose

CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm.

Products Affected

Vendor Product Version
ribose rnp *
CVE-2023-29479

Ribose RNP before 0.16.3 may hang when the input is malformed.

Products Affected

Vendor Product Version
ribose rnp *
CVE-2023-29480

Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.

Products Affected

Vendor Product Version
ribose rnp *