Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 41: RNP Critical PKESK Decryption Issue CVE-2025-13402

Version 0.18.1 Security Fixed critical issue where PKESK (public-key encrypted) session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only (CVE-2025-13402). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-bc8b81c28d 2025-11-29 19:57:40.628634+00:00 -------------------------------------------------------------------------------- Name : rnp Product : Fedora 41 Version : 0.18.1 Release : 1.fc41 URL : https://github.com/rnpgp/rnp Summary : OpenPGP (RFC4880) tools Description : RNP is a set of OpenPGP (RFC4880) tools. -------------------------------------------------------------------------------- Update Information: Version 0.18.1 Security Fixed critical issue where PKESK (public-key encrypted) session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only (CVE-2025-13402) -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 21 2025 Remi Collet - 0.18.1-1 - update to 0.18.1 for CVE-2025-13402 - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2415868 - CVE-2025-13402 rnp: RNP PKESK Session Keys Generated as All\u2011Zero [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2415868 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-bc8b81c28d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Critical fix for RNP in Fedora 41 addresses all-zero PKESK session key issue, enhancing message encryption security.. Fedora 41, RNP 0.18.1, encryption, security fix, PKESK issue. . Severity: Critical. LinuxSecurity.com Team

Nov 29, 2025 •Critical Fedora