-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Jun 2021 19:53:20 +0200 Source: nettle Binary: libhogweed4 libhogweed4-dbgsym libnettle6 libnettle6-dbgsym nettle-bin nettle-bin-dbgsym nettle-dev Architecture: armel Version: 3.4.1-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: armhf Build Daemon (antheil) Changed-By: Magnus Holmgren Description: libhogweed4 - low level cryptographic library (public-key cryptos) libnettle6 - low level cryptographic library (symmetric and one-way cryptos) nettle-bin - low level cryptographic library (binary tools) nettle-dev - low level cryptographic library (development files) Closes: 985652 989631 Changes: nettle (3.4.1-1+deb10u1) buster-security; urgency=high . * Fix for CVE-2021-3580 - potential crash on invalid input to the RSA decryption functions (Closes: #989631). * Fix for CVE-2021-20305 - bug in ECDSA signature verification that could lead to a denial of service attack (via an assertion failure) or possibly incorrect results, backported from 3.7.2 by Marc Deslauriers (Closes: #985652). Checksums-Sha1: 84d213541b2a96ef7784f7d4bf52e133941fc7da 186916 libhogweed4-dbgsym_3.4.1-1+deb10u1_armel.deb 0b88df6c386c287320111519076bf2494fa92568 129084 libhogweed4_3.4.1-1+deb10u1_armel.deb e0395627cdf24ddffd6e98b462c135a9fda1b5ad 235476 libnettle6-dbgsym_3.4.1-1+deb10u1_armel.deb efbe0568593961ce54061b28dc105d470a1a8da6 224048 libnettle6_3.4.1-1+deb10u1_armel.deb 4147a5500cb2ca53d8e2069486419a7b43de6622 171856 nettle-bin-dbgsym_3.4.1-1+deb10u1_armel.deb 62f57228058d0b0463a3fa6d708bc8cfa99fae09 22940 nettle-bin_3.4.1-1+deb10u1_armel.deb b34676d2e1f9d026675a74513ff8032f64d98d4f 1079636 nettle-dev_3.4.1-1+deb10u1_armel.deb 96c18c362bcf4ef297cc3b5b69de56da071fff5f 7202 nettle_3.4.1-1+deb10u1_armel-buildd.buildinfo Checksums-Sha256: d36d3b94cc85458ef942973e144ece586dce40b1716dd38730116fe59bf8d415 186916 libhogweed4-dbgsym_3.4.1-1+deb10u1_armel.deb e30dc3dd90b364e93dc3d1b648794f5464471c6577146ce325d7bbc1e956de6f 129084 libhogweed4_3.4.1-1+deb10u1_armel.deb 84dddc8569af97b5d4db9e52bcdad270a91ef688b105d87cdec2fff0ab132808 235476 libnettle6-dbgsym_3.4.1-1+deb10u1_armel.deb 460d0d9edd2cce61c38db193cbefa0c3c81c317b25b6832536f82636e9037341 224048 libnettle6_3.4.1-1+deb10u1_armel.deb 44a7d82585ab0199238a87476af11183eccbddcc369e1e3e104a1f0ac0f61c92 171856 nettle-bin-dbgsym_3.4.1-1+deb10u1_armel.deb 38cecec33a7ce9a3f4fbbcb36994748015e1b777d717d3646ef5f4c89a326ffc 22940 nettle-bin_3.4.1-1+deb10u1_armel.deb 4cd24c976e869b248137540817a96c3edaa3d204855ce1cf34d309aa4863f4ab 1079636 nettle-dev_3.4.1-1+deb10u1_armel.deb 5277f94eecd779d0d240d9470e3e8729fbba06604b4807a474263cfa4da0d293 7202 nettle_3.4.1-1+deb10u1_armel-buildd.buildinfo Files: e36552d15d5da6c464946ffc248d1bdd 186916 debug optional libhogweed4-dbgsym_3.4.1-1+deb10u1_armel.deb 979f69c4f93dcdae63fc0633931e9660 129084 libs optional libhogweed4_3.4.1-1+deb10u1_armel.deb 1da7a2eed07cd6efcb0146dc3ebd0f2f 235476 debug optional libnettle6-dbgsym_3.4.1-1+deb10u1_armel.deb 84f1402b4b2aa74aa99a63c448b11c11 224048 libs optional libnettle6_3.4.1-1+deb10u1_armel.deb 6e9d1d4d402ac8594fdf4c95d4c41d8a 171856 debug optional nettle-bin-dbgsym_3.4.1-1+deb10u1_armel.deb 885b8ba5ab148af4adaddcdd6a8b8809 22940 misc optional nettle-bin_3.4.1-1+deb10u1_armel.deb 08d086fb89843282a526fed59eb6d875 1079636 libdevel optional nettle-dev_3.4.1-1+deb10u1_armel.deb 6db73db7fa49ac73efaa4ceb527cfc66 7202 libs optional nettle_3.4.1-1+deb10u1_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+1GJPNvS1hXASfHY/2Ioj1sRd84FAmDJHhsACgkQ/2Ioj1sR d84+Ew/6AucbEodFYzneBVnCHlkWvJdZS1IpjI9Js38v4JZhkvLYpkShxdbvjyU5 q9YhfrhJHLiCrjy9Cqk2au4eMf1tNqltURQCz5ACMYaWPyJOG/ww9T74ikPduC8/ bM2uubxPbO/PMEtnefgppaeauGDouQAv2gZNPko877ibid6tg0YMV80AUZ7fLZMj mDsVigUOiGGSpsSFmef+bBwmgdXpwreknrvZlx4NE3i730b9iupnVV3ZIxV+Mg2/ 9NpinlBoq8yJtwszGQK32rjr7GYGLV4F8JmuAhfy1h390I5bimL4l4CptECDkUQ2 hSglmVy3K/XvImIFS0P4CmHL9336DQd3APJISb9WmCZ+ec11rnMvIiO066VZczcX PAXnKLMVPOO3j7DfV1CsxE51mb3ax0LlkXFArudgirATjB3b/6eWeX8CtFSaaITo yD/DjS+jIarTCUIBSM5UvlGzNFhcEsNBCq0VLBykQZOepFgCRLgqQL/PCAv0ey/4 o4gK6oHfVMxVCeA5IZXUe0qtbRBWFqWYqTi/cXM6ZkUmorZH5nmxon3CBCNw/g8j I4NdzKLm3NQluU7lasZyJg2E4lhehlTIoSrA0GeCtxDgzlHLgys8ZSM020Z7nYwd BtgYNQSlUx9CRZJ8TuGMELoDvpGL+TS38hG/q52MO0NEVQ6TT+M= =RLwT -----END PGP SIGNATURE-----