Format: 1.8
Date: Wed, 07 Apr 2021 10:17:48 -0400
Source: nettle
Binary: libnettle6 libhogweed4 nettle-dev nettle-bin nettle-dbg
Architecture: armhf
Version: 3.2-1ubuntu0.16.04.2
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-063.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libhogweed4 - low level cryptographic library (public-key cryptos)
 libnettle6 - low level cryptographic library (symmetric and one-way cryptos)
 nettle-bin - low level cryptographic library (binary tools)
 nettle-dbg - low level cryptographic library (debugging symbols)
 nettle-dev - low level cryptographic library (development files)
Changes:
 nettle (3.2-1ubuntu0.16.04.2) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: Out of Bound memory access in signature verification
     - debian/patches/CVE-2021-20305-1.patch: new functions
       ecc_mod_mul_canonical and ecc_mod_sqr_canonical in
       curve25519-eh-to-x.c, curve448-eh-to-x.c, ecc-eh-to-a.c,
       ecc-internal.h, ecc-j-to-a.c, ecc-mod-arith.c, ecc-mul-m.c.
     - debian/patches/CVE-2021-20305-2.patch: use ecc_mod_mul_canonical for
       point comparison in eddsa-verify.c.
     - debian/patches/CVE-2021-20305-3.patch: fix bug in ecc_ecdsa_verify in
       ecc-ecdsa-verify.c, testsuite/ecdsa-sign-test.c.
     - debian/patches/CVE-2021-20305-4.patch: ensure ecdsa_sign output is
       canonically reduced in ecc-ecdsa-sign.c.
     - debian/patches/CVE-2021-20305-6.patch: similar fix for eddsa in
       eddsa-hash.c.
     - debian/libhogweed4.symbols: added new symbols.
     - CVE-2021-20305
Checksums-Sha1:
 e35d2c93e99b00501edc3d6068899993d4b7540d 1220 libhogweed4-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 8733c53f8f5dd32e98c70f89610d4136a0f5ab0d 125900 libhogweed4_3.2-1ubuntu0.16.04.2_armhf.deb
 2fa41ddaf538a6b76a7c96e2f2abc1de2775866f 1212 libnettle6-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 08300d6dfdcde6e70e3418745fea56b2cb61269d 110998 libnettle6_3.2-1ubuntu0.16.04.2_armhf.deb
 03f88de60a19fe8ec6c9af7fa1696f852aa154bf 1334 nettle-bin-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 6516f9a8f9af0002a2b224e8604807e2e303b0d1 22444 nettle-bin_3.2-1ubuntu0.16.04.2_armhf.deb
 bb7fc8509a19e2389f1b96b72537f3d7c1b2b21b 327210 nettle-dbg_3.2-1ubuntu0.16.04.2_armhf.deb
 a3164f80be2d5bf8f6a6741f717525e27820f14d 1162 nettle-dev-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 df5ba998b7b674c1f6c110263b1af58796f147e0 946848 nettle-dev_3.2-1ubuntu0.16.04.2_armhf.deb
Checksums-Sha256:
 a48da5f6251dc16498ced2a3db134e66f5de2941edb596611946058162bc4ea0 1220 libhogweed4-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 81ed749519a64e349f84fa7a2fbf305c9c18f812e0c4c94bb167ae9356f92e85 125900 libhogweed4_3.2-1ubuntu0.16.04.2_armhf.deb
 e892e02d3f0e127646b9deb5bca6664bf2abec8fa571c8fb8f6f5b09e0e50439 1212 libnettle6-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 a1d786fe6a1ef6b137e1baa2f1b216aaa5e71c53728bdad9901cf25acb523f40 110998 libnettle6_3.2-1ubuntu0.16.04.2_armhf.deb
 62499c8fd42ce662fcc07ccf83bb6339ab70a73767aa2a45e26474209629a6ca 1334 nettle-bin-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 357798cc86becf55b4dfbfa6554789b6397031a864ee4dbae7442e4751b1420b 22444 nettle-bin_3.2-1ubuntu0.16.04.2_armhf.deb
 afe96910033f1f9e796f22d24be630c83d5fd3d7e32d85e41c6ceb56ba3afe3a 327210 nettle-dbg_3.2-1ubuntu0.16.04.2_armhf.deb
 b61364c27d094279be7c2a4476b8f35a43eb8384dd6b71ce96c182d203b0f97b 1162 nettle-dev-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 66ad15b2458b2931edf27b12ffc083637ce0e74c56e7327456348c545bee1653 946848 nettle-dev_3.2-1ubuntu0.16.04.2_armhf.deb
Files:
 03ca211442cec3d5bd5006d2fdad946c 1220 libs extra libhogweed4-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 d61d0d2bce91d3e91ea403581349cb74 125900 libs optional libhogweed4_3.2-1ubuntu0.16.04.2_armhf.deb
 11d502d321704d81a9f49341adc90836 1212 libs extra libnettle6-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 31689c94ee17afd68523a909dac7694d 110998 libs optional libnettle6_3.2-1ubuntu0.16.04.2_armhf.deb
 860a9fce5b535df2ec47d2a2f34063d3 1334 misc extra nettle-bin-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 88859768f511b0359b7de645671aeafa 22444 misc optional nettle-bin_3.2-1ubuntu0.16.04.2_armhf.deb
 446c2adff557105deb59c2bae1460af0 327210 debug extra nettle-dbg_3.2-1ubuntu0.16.04.2_armhf.deb
 5f79c8d7d39fb01b77cf3215b4487fb5 1162 libdevel extra nettle-dev-dbgsym_3.2-1ubuntu0.16.04.2_armhf.ddeb
 ce678ad635a2a20ffda66fbd787e7db3 946848 libdevel optional nettle-dev_3.2-1ubuntu0.16.04.2_armhf.deb
Original-Maintainer: Magnus Holmgren <holmgren@debian.org>