This package is not in any development repository. This probably
means that the package
has been removed
(or has been renamed). Thus the information here is of little interest ...
the package is going to disappear unless someone takes it over and
reintroduces it.
1 issue left for the package maintainer to handle:
CVE-2024-25714:
(needs triaging)
In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. (The fix uses gnutls_memcmp, which has constant-time execution.)
![[bug history graph]](https://qa.debian.org/data/bts/graphs/r/rhonabwy.png){kind=link}