CVE-2026-21895
Publication date 8 January 2026
Last updated 13 January 2026
Ubuntu priority
Description
The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is `1`. Version 0.9.10 fixes the issue.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| rust-rsa | 25.10 questing |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy | Not in release |