Debian/rust-sequoia-openpgp: high 7.5
The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsuppo
Action: Upgrade rust-sequoia-openpgp to 1.21.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.0-1 | - |
Fixed versions
| 1.21.0-1 |
Sources
- osv: DEBIAN-CVE-2024-58261#Debian:14/rust-sequoia-openpgp
- https://security-tracker.debian.org/tracker/CVE-2024-58261
published · modified · JSON