Format: 1.8
Date: Wed, 07 Apr 2021 10:17:48 -0400
Source: nettle
Binary: libnettle6 libhogweed4 nettle-dev nettle-bin nettle-dbg
Architecture: amd64
Version: 3.2-1ubuntu0.16.04.2
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-013.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libhogweed4 - low level cryptographic library (public-key cryptos)
 libnettle6 - low level cryptographic library (symmetric and one-way cryptos)
 nettle-bin - low level cryptographic library (binary tools)
 nettle-dbg - low level cryptographic library (debugging symbols)
 nettle-dev - low level cryptographic library (development files)
Changes:
 nettle (3.2-1ubuntu0.16.04.2) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: Out of Bound memory access in signature verification
     - debian/patches/CVE-2021-20305-1.patch: new functions
       ecc_mod_mul_canonical and ecc_mod_sqr_canonical in
       curve25519-eh-to-x.c, curve448-eh-to-x.c, ecc-eh-to-a.c,
       ecc-internal.h, ecc-j-to-a.c, ecc-mod-arith.c, ecc-mul-m.c.
     - debian/patches/CVE-2021-20305-2.patch: use ecc_mod_mul_canonical for
       point comparison in eddsa-verify.c.
     - debian/patches/CVE-2021-20305-3.patch: fix bug in ecc_ecdsa_verify in
       ecc-ecdsa-verify.c, testsuite/ecdsa-sign-test.c.
     - debian/patches/CVE-2021-20305-4.patch: ensure ecdsa_sign output is
       canonically reduced in ecc-ecdsa-sign.c.
     - debian/patches/CVE-2021-20305-6.patch: similar fix for eddsa in
       eddsa-hash.c.
     - debian/libhogweed4.symbols: added new symbols.
     - CVE-2021-20305
Checksums-Sha1:
 08accfda0a8499069b9afb89267b1f5beb834e21 1218 libhogweed4-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 821b9489638b37e6e8e1783375ba5d354e67a6bc 135646 libhogweed4_3.2-1ubuntu0.16.04.2_amd64.deb
 e1da16c595902495120229049d28fad898b6ae48 1212 libnettle6-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 22de66cb889ab5ec6c1a6b87bcbd8d141b16c985 93712 libnettle6_3.2-1ubuntu0.16.04.2_amd64.deb
 fe13c448b71985b3d5de49b6055d7dc863a393e1 1334 nettle-bin-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 8143852d93cb095352a5ba575a61f90bd0b4475c 24418 nettle-bin_3.2-1ubuntu0.16.04.2_amd64.deb
 2c49aa0470505205f3e3077932560e064202ab04 316326 nettle-dbg_3.2-1ubuntu0.16.04.2_amd64.deb
 8347d19049cf7cf8f2422021ac76646af8ca5864 1158 nettle-dev-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 c7b918049adc0198489efecd36e1bb6943dd71d1 938334 nettle-dev_3.2-1ubuntu0.16.04.2_amd64.deb
Checksums-Sha256:
 8d66ee4ff36604913613e490d8a89b0969a2738c8cffd20c02331788fda323ec 1218 libhogweed4-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 df5bb247c5253c9298fd6b0deed8f1f84347968d65199c1a9e929150608e7792 135646 libhogweed4_3.2-1ubuntu0.16.04.2_amd64.deb
 3bbf32255c51b2d46a0acce719ec6616f73e74c8b7d6d0b2d33ac727977ebd2b 1212 libnettle6-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 0dfe2ab5deaade064abb220d485967cae22cb880a8ba3ef00e5e9d69b5ce5d48 93712 libnettle6_3.2-1ubuntu0.16.04.2_amd64.deb
 737ef7b705451ce3eb2be4f30615da0d021d72d4b13b6cbc1d4a88cadbb068a5 1334 nettle-bin-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 a4e83e767705954f5a79bbb257b3e3b6955aba75a72c728c43d1db03ddb1390c 24418 nettle-bin_3.2-1ubuntu0.16.04.2_amd64.deb
 37f19bc724e419e4adc0ee915bb0032007034a7d600495397fea16823d79cafa 316326 nettle-dbg_3.2-1ubuntu0.16.04.2_amd64.deb
 a5fe5aceb8d93d889a8f65c07eb0ac9635b99c13cd9e5d8cee206f352447c738 1158 nettle-dev-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 38be36e64b62642201619ec287642063c1915d75a3b317234da3a626452efa83 938334 nettle-dev_3.2-1ubuntu0.16.04.2_amd64.deb
Files:
 ea6a0e315a6411d13442856765a6ce90 1218 libs extra libhogweed4-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 49eea449630e1077e96e7896bf6632f0 135646 libs optional libhogweed4_3.2-1ubuntu0.16.04.2_amd64.deb
 a9fed85e0d56c0ead8da527017f4e220 1212 libs extra libnettle6-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 b639b68006bd4dcd8d69f0743bd24980 93712 libs optional libnettle6_3.2-1ubuntu0.16.04.2_amd64.deb
 6c5ec3bb2a825b531829259b11e95a0e 1334 misc extra nettle-bin-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 5038dc0cf3dd863bb16656439102df48 24418 misc optional nettle-bin_3.2-1ubuntu0.16.04.2_amd64.deb
 6d72f6d4a84f574cb36920f9d642cfbb 316326 debug extra nettle-dbg_3.2-1ubuntu0.16.04.2_amd64.deb
 a2a7e4f7cf65ea1f511e9a97c11cc0b6 1158 libdevel extra nettle-dev-dbgsym_3.2-1ubuntu0.16.04.2_amd64.ddeb
 50febb7f539f7bd5dae81c24d99e299e 938334 libdevel optional nettle-dev_3.2-1ubuntu0.16.04.2_amd64.deb
Original-Maintainer: Magnus Holmgren <holmgren@debian.org>