Publishing details
Changelog
nettle (3.4.1-0ubuntu0.18.04.1~cloud0) xenial-queens; urgency=medium
* New upstream release for the Ubuntu Cloud Archive.
nettle (3.4.1-0ubuntu0.18.04.1) bionic-security; urgency=medium
* SECURITY UPDATE: Bleichenbacher type side-channel based padding oracle
attack in endian conversion of RSA decrypted PKCS#1 v1.5 data
- Updated to upstream 3.4.1 tarball.
- debian/*symbols: added new 3.4.1 symbols.
- CVE-2018-16869
* SECURITY UPDATE: crash in RSA decryption via manipulated ciphertext
- debian/patches/CVE-2021-3580-1.patch: change _rsa_sec_compute_root_tr
to take a fixed input size in rsa-decrypt-tr.c, rsa-internal.h,
rsa-sec-decrypt.c, rsa-sign-tr.c, testsuite/rsa-encrypt-test.c.
- debian/patches/CVE-2021-3580-2.patch: add input check to rsa_decrypt
family of functions in rsa-decrypt-tr.c, rsa-decrypt.c,
rsa-sec-decrypt.c, rsa.h, testsuite/rsa-encrypt-test.c.
- CVE-2021-3580
-- Openstack Ubuntu Testing Bot <email address hidden> Fri, 18 Jun 2021 04:27:09 +0000
Builds
Built packages
-
libhogweed4
low level cryptographic library (public-key cryptos)
-
libhogweed4-dbgsym
debug symbols for package libhogweed4
-
libnettle6
low level cryptographic library (symmetric and one-way cryptos)
-
libnettle6-dbgsym
debug symbols for package libnettle6
-
nettle-bin
low level cryptographic library (binary tools)
-
nettle-bin-dbgsym
debug symbols for package nettle-bin
-
nettle-dev
low level cryptographic library (development files)
Package files