-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Jun 2021 19:53:20 +0200 Source: nettle Binary: libhogweed4 libhogweed4-dbgsym libnettle6 libnettle6-dbgsym nettle-bin nettle-bin-dbgsym nettle-dev Architecture: armhf Version: 3.4.1-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Magnus Holmgren Description: libhogweed4 - low level cryptographic library (public-key cryptos) libnettle6 - low level cryptographic library (symmetric and one-way cryptos) nettle-bin - low level cryptographic library (binary tools) nettle-dev - low level cryptographic library (development files) Closes: 985652 989631 Changes: nettle (3.4.1-1+deb10u1) buster-security; urgency=high . * Fix for CVE-2021-3580 - potential crash on invalid input to the RSA decryption functions (Closes: #989631). * Fix for CVE-2021-20305 - bug in ECDSA signature verification that could lead to a denial of service attack (via an assertion failure) or possibly incorrect results, backported from 3.7.2 by Marc Deslauriers (Closes: #985652). Checksums-Sha1: 3e9215682b77443dddebf3b4868dfb409796d4a4 189436 libhogweed4-dbgsym_3.4.1-1+deb10u1_armhf.deb 98e466960d90fe4f48fc4eb014abecda823c3fb2 129936 libhogweed4_3.4.1-1+deb10u1_armhf.deb 0c20447471bd909c747af7f0daa205246d50128a 239312 libnettle6-dbgsym_3.4.1-1+deb10u1_armhf.deb 09bea521021d5d221fa310cb69b8775b8f6e8409 227612 libnettle6_3.4.1-1+deb10u1_armhf.deb 40cc6d55808eb01d70cab34a6623b76aa1d71bb6 172792 nettle-bin-dbgsym_3.4.1-1+deb10u1_armhf.deb ce64bba769b7e189cbe58060c0938aa8d567be57 22700 nettle-bin_3.4.1-1+deb10u1_armhf.deb 9da9ab4ea407d14597a5722e44a12561a3e224ab 1081564 nettle-dev_3.4.1-1+deb10u1_armhf.deb 1c9eb626e719f15978fa4c61ef94a3c7122c8eb2 7204 nettle_3.4.1-1+deb10u1_armhf-buildd.buildinfo Checksums-Sha256: 8fc19fb6070678158f203e6277ed5e264437acf8693fe9b9fb0e4ad418d3f821 189436 libhogweed4-dbgsym_3.4.1-1+deb10u1_armhf.deb 94d9044004f9d322a36d8bb53f4b5deb679036f0ee5731eaa7bf36e17cdc1df3 129936 libhogweed4_3.4.1-1+deb10u1_armhf.deb 3037e7ee72fd750ff35112779b83ed9c4645e3bfefc8aa8662da14d3af43be34 239312 libnettle6-dbgsym_3.4.1-1+deb10u1_armhf.deb b56a8200998d64a4f4f56816d3748fe20445ba7e66aa0ba5fd8134b8df767f0a 227612 libnettle6_3.4.1-1+deb10u1_armhf.deb feb2ae12258d562538a6f5450c9967a4ebed7f2d0a34b5a251f5cfe2581aaaab 172792 nettle-bin-dbgsym_3.4.1-1+deb10u1_armhf.deb 3f7c49b8519f110b8bf1171dd1be1f2cb64ad103e4862c99034ea1d4d176d6e7 22700 nettle-bin_3.4.1-1+deb10u1_armhf.deb cb83946f00ba3229aed4f834493902b09c9a191ba117df23767265cbcc7db7fe 1081564 nettle-dev_3.4.1-1+deb10u1_armhf.deb 56507359db6cd2ef84f575650f6544bc4feeda5988933e4487469f7bcf6bfc80 7204 nettle_3.4.1-1+deb10u1_armhf-buildd.buildinfo Files: c6766df1d8deabd6cadf42b9d71d8018 189436 debug optional libhogweed4-dbgsym_3.4.1-1+deb10u1_armhf.deb 39642598d45006cbdda3f0a48033fed1 129936 libs optional libhogweed4_3.4.1-1+deb10u1_armhf.deb 27685bd93c3977ad931bbcc8326cc489 239312 debug optional libnettle6-dbgsym_3.4.1-1+deb10u1_armhf.deb a87d3d395b200643adc20a7506ade707 227612 libs optional libnettle6_3.4.1-1+deb10u1_armhf.deb 17f6ace3e7eb971d1d819ce25932b305 172792 debug optional nettle-bin-dbgsym_3.4.1-1+deb10u1_armhf.deb a8ef52c236210f7efdf17d645723afa9 22700 misc optional nettle-bin_3.4.1-1+deb10u1_armhf.deb ed2c90756463f33ea9774e951871da19 1081564 libdevel optional nettle-dev_3.4.1-1+deb10u1_armhf.deb 87546d3e11b7d2c819207126bd8c9faa 7204 libs optional nettle_3.4.1-1+deb10u1_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnkOoRyjJ0+t2tN7OjOf+cynECFcFAmDJHZcACgkQjOf+cynE CFfFug//Xz38PBiiByMO2x/PnJOB4Yx1C/q9+R0qWSujTxvjS6Oi7L64SjhTaQEu sgKIiw5ZB8sOjzCBnYp/vo7S65E557R06e5JTgluXvI27abgIdZ+EZVk3TWoGImo 96flvuMjXVthoTa4bQLABak7nFvAjIoBg3MXlOhKY4qbxJzzwKw7JcQYyoBp1jjm C2HgUd0XZUo5eA/kPZi2hW2Uetw/O//0A0nCEVS1F9cMIJ+fR3kl46wh2z8P0tw/ qPyfTlrbQUFEDAVJkHkX23CZWLzs1bd1D6OPA2eN49xbml9rvQk1yRvrfrl4C62h 5soy0VR/TXxcuhmuaasjNC4zC2pXZ3jF1snyqZYoLjU8nvqjeXUn3fdrlY+OrEq5 oHCDMS1DhfhSf6hqGO12HUxXJnhqk62/w2SJrGN/U4EUAcpAExf0SNG/Nag3IVjR LMdHTHfi3/e/8/oXNZDsFe0siJ/F4Zw74lKqzqZtHo32d611lukdT7bBlw8yyBuX wleiVSmU6oC43LVXtwlUjSuXdzweb8z161MvvgAimeLMdN7rPxBC0etgXiUS5coT NsqmL8hljVlG47hzvNKld+J6dy3co6b4Pxb8ZeJ9JEwtSLo9EgTwfLg2HGZVxBP7 yQLH0oaGFRBK1+sy3XgNh0heJfyr67b+O2ssJKYpEYW+33CXFOA= =TbLT -----END PGP SIGNATURE-----