-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Jun 2021 19:53:20 +0200 Source: nettle Binary: libhogweed4 libhogweed4-dbgsym libnettle6 libnettle6-dbgsym nettle-bin nettle-bin-dbgsym nettle-dev Architecture: s390x Version: 3.4.1-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Magnus Holmgren Description: libhogweed4 - low level cryptographic library (public-key cryptos) libnettle6 - low level cryptographic library (symmetric and one-way cryptos) nettle-bin - low level cryptographic library (binary tools) nettle-dev - low level cryptographic library (development files) Closes: 985652 989631 Changes: nettle (3.4.1-1+deb10u1) buster-security; urgency=high . * Fix for CVE-2021-3580 - potential crash on invalid input to the RSA decryption functions (Closes: #989631). * Fix for CVE-2021-20305 - bug in ECDSA signature verification that could lead to a denial of service attack (via an assertion failure) or possibly incorrect results, backported from 3.7.2 by Marc Deslauriers (Closes: #985652). Checksums-Sha1: a6f8373cbee6c2ffbab5a5f3353ad51a58d209fe 200556 libhogweed4-dbgsym_3.4.1-1+deb10u1_s390x.deb 7a4c0402cafc42edec4a596fc0cd3d16a4cadb01 138664 libhogweed4_3.4.1-1+deb10u1_s390x.deb eeb0e51fed2821232bd6e26eb4b9828536eba615 243816 libnettle6-dbgsym_3.4.1-1+deb10u1_s390x.deb 3add6acaca7a7e94f060e2f8a93be1071c5d1062 224744 libnettle6_3.4.1-1+deb10u1_s390x.deb affa4b34fef1f25386c20871fe57883f5392ad49 168384 nettle-bin-dbgsym_3.4.1-1+deb10u1_s390x.deb f997899654944df2d5527a2af2020d08bad62dc4 24292 nettle-bin_3.4.1-1+deb10u1_s390x.deb 3cd9b142c5b34d067aaae935bbca87f445816e34 1085008 nettle-dev_3.4.1-1+deb10u1_s390x.deb f7152c7c1c80e06e7f0d16ff9240cec765ebf067 7222 nettle_3.4.1-1+deb10u1_s390x-buildd.buildinfo Checksums-Sha256: 18e72c672bdad958dde2d92e48031f1dfc32556d0c4c042f7935c062e89342dc 200556 libhogweed4-dbgsym_3.4.1-1+deb10u1_s390x.deb b693c6ba82614f8aa36eb605669693dab9b12bcde292b470314b6b6f0142a8d8 138664 libhogweed4_3.4.1-1+deb10u1_s390x.deb 436f33d21a586ff8187434f5bac5a2a393b02c473075d85874b0c787f085514d 243816 libnettle6-dbgsym_3.4.1-1+deb10u1_s390x.deb c39bd7c1efeeb7a37a9b926cdaa404aeea8e588b977876cef2f29d651b0ea892 224744 libnettle6_3.4.1-1+deb10u1_s390x.deb c4e7eb0cce956d72c9ebd6fc9759b5ad6d2ec7eed4605a198c160b8d6c58628b 168384 nettle-bin-dbgsym_3.4.1-1+deb10u1_s390x.deb e1b35ff98002a458b1fe4bcc1dae50dab5da434797f66f70eafacb9be7346bcc 24292 nettle-bin_3.4.1-1+deb10u1_s390x.deb c03182ef93ae21ba927b0df13d4fea3d513360f2b466f4aa36832d4e5d895268 1085008 nettle-dev_3.4.1-1+deb10u1_s390x.deb aea848a2d3777d68f3638cd311106055b9131c5537c11528b3eb56ac9b2008e5 7222 nettle_3.4.1-1+deb10u1_s390x-buildd.buildinfo Files: 899841129d4347beba73d850a199d379 200556 debug optional libhogweed4-dbgsym_3.4.1-1+deb10u1_s390x.deb ca1be80e1a483d8834ada041d9e94b4e 138664 libs optional libhogweed4_3.4.1-1+deb10u1_s390x.deb ffa5b3deca889988f0a841e50383b3bd 243816 debug optional libnettle6-dbgsym_3.4.1-1+deb10u1_s390x.deb f39e8aa15df55352a3efeff02e6ead45 224744 libs optional libnettle6_3.4.1-1+deb10u1_s390x.deb 4365c2450f9babf84a74d7ccd35eba4f 168384 debug optional nettle-bin-dbgsym_3.4.1-1+deb10u1_s390x.deb 7853556cc0efbfcb784c6504df230e99 24292 misc optional nettle-bin_3.4.1-1+deb10u1_s390x.deb 3bef1a5ff8d9078ce44c8c757ab1d5d9 1085008 libdevel optional nettle-dev_3.4.1-1+deb10u1_s390x.deb 3868177ce48262b8fcbc437d9ae59bbb 7222 libs optional nettle_3.4.1-1+deb10u1_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEFqa2gGJPuqUn28GPt7ZbF/TyQK4FAmDJHagACgkQt7ZbF/Ty QK7mRw//b1mrGY7IELSbJ7n/OwQCd4lJJ+lJItuagtu7h1eoyJfcnsCx3+EkPUie EYrN00306kG89LMOiMacr43/2ib7IWsBsPfDq4PcZHVCrxPxO5YuwzV5cC9Jm0lB xjtbm5FxYxxufgOSiNt7lOuhaAQeJIuRKr6y3o4eoBdA0k7Ic1YUgo0WuSIPBXvd iFDXybtghvQ6f/I3IR5hC/YJpvJQoENiyQpceV9VDyH55JXqpsyWcokbgs4s8xiV DIjOZ3XA3pRH5nR92Hgl04rWKMpW+HIEjOzph7Pu1wkmItnjgjKlKaL16vqppOn7 r4irWgj74nMKaBElLI76pLjq0CltnLJwCAo1ISY5L4ocvPzi/ZvVd2J7pD5d2F/R DDuYbASqLcvZ5rPWAiey53VqSxQOZWjJJw4FpZPXAeIRpNk4XdKexT7b/xjsSuyd F49fcuVr2j92vxo7wxJns/880FS1vRIbDQvVCcTsDXv0+ZGxVomxOcgI1elWl4K/ BmagVZTdXnA3+aEouA6uXhVSgK5Sg3LhYzxcce1+fZAWHzWl/jnviZZrLqD2VUj1 3QNGzyt92KE1lTa9E6BT+sD9AeJlkAMU5arIXr5+Va/53Q7SAf2tz/70lnGbk0RA XD5TdO7lZVbO2Qj9yGZ8kPTeAKLQX5UTMgAWSYjxTOivIL0TVIU= =vNEW -----END PGP SIGNATURE-----