-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Jun 2021 19:53:20 +0200 Source: nettle Binary: libhogweed4 libhogweed4-dbgsym libnettle6 libnettle6-dbgsym nettle-bin nettle-bin-dbgsym nettle-dev Architecture: arm64 Version: 3.4.1-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Magnus Holmgren Description: libhogweed4 - low level cryptographic library (public-key cryptos) libnettle6 - low level cryptographic library (symmetric and one-way cryptos) nettle-bin - low level cryptographic library (binary tools) nettle-dev - low level cryptographic library (development files) Closes: 985652 989631 Changes: nettle (3.4.1-1+deb10u1) buster-security; urgency=high . * Fix for CVE-2021-3580 - potential crash on invalid input to the RSA decryption functions (Closes: #989631). * Fix for CVE-2021-20305 - bug in ECDSA signature verification that could lead to a denial of service attack (via an assertion failure) or possibly incorrect results, backported from 3.7.2 by Marc Deslauriers (Closes: #985652). Checksums-Sha1: f2defa1e1f42408ff487ccf8d8de677341a2fd6f 200696 libhogweed4-dbgsym_3.4.1-1+deb10u1_arm64.deb 8aba788e7c590ad85f7c90eb9e20a3a5f4356a96 137568 libhogweed4_3.4.1-1+deb10u1_arm64.deb b6466fd3d36f72e047ddc987c606576057d96d3c 242336 libnettle6-dbgsym_3.4.1-1+deb10u1_arm64.deb 952c9644a07ccb011642ca454c62d5e03fe01827 225436 libnettle6_3.4.1-1+deb10u1_arm64.deb d0426c89b0da9a349af066ba774e3ffa964404ef 171916 nettle-bin-dbgsym_3.4.1-1+deb10u1_arm64.deb ce8a7b2d2c983196bdb411b8d8d2ff8cc8323c81 25240 nettle-bin_3.4.1-1+deb10u1_arm64.deb f82a2712e2a41665aa14da7c942734a5ebfbde5d 1091488 nettle-dev_3.4.1-1+deb10u1_arm64.deb 9d80e2610c8299d37e3eaac2e64fe4244696498d 7270 nettle_3.4.1-1+deb10u1_arm64-buildd.buildinfo Checksums-Sha256: 18b39c9d5c11c2d9ef9645ac86dd856a44121231a2f1cf03876a02d0d335e9fd 200696 libhogweed4-dbgsym_3.4.1-1+deb10u1_arm64.deb 8719f46daf0594496e8c23ae89d2e269f73ec7752500c2270bd17e128574efed 137568 libhogweed4_3.4.1-1+deb10u1_arm64.deb 0733128dff9c5160bf1098bc1c50c18221e2b05558f192b7607ff13aec827687 242336 libnettle6-dbgsym_3.4.1-1+deb10u1_arm64.deb 1996cf1fc867477d541351d793335f545728dc952b05b87fe60321deed7333b9 225436 libnettle6_3.4.1-1+deb10u1_arm64.deb f4d4bea61fa8878c2e88db7412a4bf102025db11adc027fe8a852e0aba5bdb79 171916 nettle-bin-dbgsym_3.4.1-1+deb10u1_arm64.deb 592fc74ac8557ab4665d10af73ba94e71bf0451a7eaec171e540c9ffe553d8f2 25240 nettle-bin_3.4.1-1+deb10u1_arm64.deb a246920f59fb064d4ef3f904edb3b3c9d343497e81b87abdb9066940cce95e06 1091488 nettle-dev_3.4.1-1+deb10u1_arm64.deb 23c771b61392f3c41f9923fb3c304264cb6f4d183fd3723067d64335845b4ff7 7270 nettle_3.4.1-1+deb10u1_arm64-buildd.buildinfo Files: 8828a305341409e8870c57b4674ea7f8 200696 debug optional libhogweed4-dbgsym_3.4.1-1+deb10u1_arm64.deb a892fa4821d08bac8f8a6086a5ece52d 137568 libs optional libhogweed4_3.4.1-1+deb10u1_arm64.deb 2e2c9ce5f571fd9a71118f9e916e4522 242336 debug optional libnettle6-dbgsym_3.4.1-1+deb10u1_arm64.deb e874fc71d114ecf426331363ede9ad35 225436 libs optional libnettle6_3.4.1-1+deb10u1_arm64.deb 1b65d6719e62e352742796820f3aebb4 171916 debug optional nettle-bin-dbgsym_3.4.1-1+deb10u1_arm64.deb a454fe9ac31f2bba86410cfe462dacdd 25240 misc optional nettle-bin_3.4.1-1+deb10u1_arm64.deb b31279c6d484c522a587e279c556e10d 1091488 libdevel optional nettle-dev_3.4.1-1+deb10u1_arm64.deb 87dcc214fb17d8171a884514c346eda1 7270 libs optional nettle_3.4.1-1+deb10u1_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEATMECE6lCPIqB83t2Kk8QrDgjIwFAmDJHS0ACgkQ2Kk8QrDg jIw8yA//UQRb7PbeuI4LpYouFjc6I33N+mNDTUdOl6LrN4wS5i8aDQN2RI3ZaPID BT3fyTVUZk7SzJZ9OjaK4OdAnDU+IAj7eEUTArskIpudSCTyPoGs+sTsSnrxVEk7 d3/YMHA026J4tMZrqqJsgEM9G6u7q6WoUl3vQKKMAJ1nqXkUC8HPXuZ8djuWJ8Np +4BjWgYUNPddsHApfVqUYYFbpcNVcCkh032dyPn5uPznF6pciW43HfD0GZok1QRU rH7ItcOeQisaTRAZaTv2jodmcEv1/dfyihrI1io002QzxIqp62vOOeQWh2r7ZJxe fJzGPzAjut/7IrvrHWsiqkDJuoR4C2/0EYgzHq94UL//wUJ/p3UHufiarneNSm5L M6e/OjMIRa0Fvj2mNEy2Fn880uzuDKLAOZPe+CsyQH09v2eBoO2x0sDfYeXKa1MR N5Fh1Jh1DItQasPwFyZgfk/sl7PROPM23HuJ4/wss5kLqMUoR1vk3IECej9AHy1c kXJkXJLqxtQ1vn17oPvDe4w/1+CS6YiQdEIM+UmubTz/CG5pA8P8y3BmPQYMEXtp NUwxrD+69gYvX9w8UqlWGz5u0V2owI40msw4lRfYa1Fs9tIPkGl5pLrsB6sEIQm4 y0/tjPmeH0+4aLj6QYqc9xtpJeBzvwDkUajV+6HdGEfOCNyyAeY= =fvoC -----END PGP SIGNATURE-----