-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Jun 2021 19:53:20 +0200 Source: nettle Binary: libhogweed4 libhogweed4-dbgsym libnettle6 libnettle6-dbgsym nettle-bin nettle-bin-dbgsym nettle-dev Architecture: mipsel Version: 3.4.1-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-manda-05) Changed-By: Magnus Holmgren Description: libhogweed4 - low level cryptographic library (public-key cryptos) libnettle6 - low level cryptographic library (symmetric and one-way cryptos) nettle-bin - low level cryptographic library (binary tools) nettle-dev - low level cryptographic library (development files) Closes: 985652 989631 Changes: nettle (3.4.1-1+deb10u1) buster-security; urgency=high . * Fix for CVE-2021-3580 - potential crash on invalid input to the RSA decryption functions (Closes: #989631). * Fix for CVE-2021-20305 - bug in ECDSA signature verification that could lead to a denial of service attack (via an assertion failure) or possibly incorrect results, backported from 3.7.2 by Marc Deslauriers (Closes: #985652). Checksums-Sha1: 9ae721428004779dfc670b752acdd2522176543b 191972 libhogweed4-dbgsym_3.4.1-1+deb10u1_mipsel.deb 4f6a295c588c61441cabfc51e5f86be52d1ec68a 133072 libhogweed4_3.4.1-1+deb10u1_mipsel.deb 2f7b52053c9d9afeeb2455f2c5137908cd70e563 250864 libnettle6-dbgsym_3.4.1-1+deb10u1_mipsel.deb 588187b9032458f569b200142392f7e1c9690dcb 238116 libnettle6_3.4.1-1+deb10u1_mipsel.deb 22b7521233183cebf64e3fab6e2c75093901f679 171028 nettle-bin-dbgsym_3.4.1-1+deb10u1_mipsel.deb c59f7dd90e8d6ff0ecd4fe37613df59d6cd86c65 25116 nettle-bin_3.4.1-1+deb10u1_mipsel.deb 9334e0b98b4d00ba8a8a1cf87c740a6ded59dffc 1109416 nettle-dev_3.4.1-1+deb10u1_mipsel.deb cda92eb7d6e353165bc957346d3183b02b8ecc23 7177 nettle_3.4.1-1+deb10u1_mipsel-buildd.buildinfo Checksums-Sha256: 309760a2763c002a81ea7a83f4bf4426852cd4d2c279d49abe0ed130bc72cbf0 191972 libhogweed4-dbgsym_3.4.1-1+deb10u1_mipsel.deb 22a3994f92e78ac1e104e425c9c09a8d0cf7dce8e04463bf90e6d2404be2df3e 133072 libhogweed4_3.4.1-1+deb10u1_mipsel.deb 030afb2a63b3b8bb8a4a37bd160a68c089684cb038daaed37a0213739f3845dd 250864 libnettle6-dbgsym_3.4.1-1+deb10u1_mipsel.deb bb7ca3988ba1b082ae6ed57c413c017ac6431732f5b5d03262b0182fe8185be6 238116 libnettle6_3.4.1-1+deb10u1_mipsel.deb 40d1b42b71a56b0830e846171916dbdaa4c0f130f3a8dcfd0c22a5aeb565e07b 171028 nettle-bin-dbgsym_3.4.1-1+deb10u1_mipsel.deb 5f00978a73ae7e6c84341f8ad60b9754a01a5355e27a44a70c45fc304e9a940c 25116 nettle-bin_3.4.1-1+deb10u1_mipsel.deb 5837ca7710ce484c6f6f3a45abd6eb766fc8e97e854a79822878f386a1b88c07 1109416 nettle-dev_3.4.1-1+deb10u1_mipsel.deb 4470dd29b3e7b8c0598db372d17e0a795ff13e9a8f62ef9430072d385a69a414 7177 nettle_3.4.1-1+deb10u1_mipsel-buildd.buildinfo Files: dc5999c26fb9ff35818c22fb10d9639c 191972 debug optional libhogweed4-dbgsym_3.4.1-1+deb10u1_mipsel.deb e3a8161997e07d614674c776628676c8 133072 libs optional libhogweed4_3.4.1-1+deb10u1_mipsel.deb 700403b801b86d5169b17894812e9aee 250864 debug optional libnettle6-dbgsym_3.4.1-1+deb10u1_mipsel.deb 29e2dd0bd7eb4afa793881c11a44d874 238116 libs optional libnettle6_3.4.1-1+deb10u1_mipsel.deb 9c25749aa216dab9c714127e43cbced4 171028 debug optional nettle-bin-dbgsym_3.4.1-1+deb10u1_mipsel.deb cf97b54259ad4818318837e5ca0d285b 25116 misc optional nettle-bin_3.4.1-1+deb10u1_mipsel.deb c9b478528298f9f1852764df3f583fef 1109416 libdevel optional nettle-dev_3.4.1-1+deb10u1_mipsel.deb 05584f9d0cb4b377ebb25d2611024ed0 7177 libs optional nettle_3.4.1-1+deb10u1_mipsel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9DC30dIoD5TtdakHJzu1o496EtIFAmDJHbEACgkQJzu1o496 EtLUTxAAwXXnRIc0ItitKCg3qq73W5MD2CrgyqP0vPQXIqVwAvWiRmY97mGxpSd5 S2S2YOosczahU2R3iR2MHUSvaxhZUaji0DCj+M6HTXhfVE+CcIzru4rQpNbQ3IEP z5gPBJIZ4E0DxzV+H31oj7cPNDqhYe7SAsVb9MNbY3/3NEVeFkqNXtrHKw7Kol7Q KrG/uhPy4zS9rvyELCU35qHdGoC0i4vvAqgY3DVuL7SK7fTKkFCRYoeckj57vlKu 1YPwxxokiswLbEot27Ri4aFMtg3gVxbgwx9uU7kunBmGJ2Q3B8zjJGmC0xAJmJif YE5/lzh3Qs1IWcBmI0NX18wkkCxnBiWTuJYXt/i4b67/rU2943fQi8vdEM5T/Rke i/QNtiOn2J5wYwfAAJT5jUjaJPqO47WOag3OBf7mZuTD8AW6RgoJM62hBZiErjUk 2lTnA71zCvg7q6WZJB+Widy86o96iKQV6KxdFJ5lndxXSnrfNnsey+DbnlQ/FBsa cv/kL4QjiejOT3DVawc7BRku25qAyrK2u9CKoSDxf+Un+0JO/X1mavuR3neGxMzw JneW/6u17e74QKw2TGMwYBFqabJt+kUYSi2ngOq2IsldyucUnB3GyCNtT8TbiSEy /tz01c2NzFdBjQD/h5MosWVK6OzakJ7c3nplvW7fpvJPnwosaqE= =THFZ -----END PGP SIGNATURE-----