nettle 3.5.1+really3.5.1-2ubuntu0.1 source package in Ubuntu
Changelog
nettle (3.5.1+really3.5.1-2ubuntu0.1) focal-security; urgency=medium * SECURITY UPDATE: Out of Bound memory access in signature verification - debian/patches/CVE-2021-20305-1.patch: new functions ecc_mod_mul_canonical and ecc_mod_sqr_canonical in curve25519-eh-to-x.c, curve448-eh-to-x.c, ecc-eh-to-a.c, ecc-internal.h, ecc-j-to-a.c, ecc-mod-arith.c, ecc-mul-m.c. - debian/patches/CVE-2021-20305-2.patch: use ecc_mod_mul_canonical for point comparison in eddsa-verify.c. - debian/patches/CVE-2021-20305-3.patch: fix bug in ecc_ecdsa_verify in ecc-ecdsa-verify.c, testsuite/ecdsa-sign-test.c. - debian/patches/CVE-2021-20305-4.patch: ensure ecdsa_sign output is canonically reduced in ecc-ecdsa-sign.c. - debian/patches/CVE-2021-20305-6.patch: similar fix for eddsa in eddsa-hash.c. - debian/libhogweed5.symbols: added new symbols. - CVE-2021-20305 -- Marc Deslauriers <email address hidden> Wed, 07 Apr 2021 10:12:22 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Focal
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- libs
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
nettle_3.5.1+really3.5.1.orig.tar.gz | 1.9 MiB | 75cca1998761b02e16f2db56da52992aef622bf55a3b45ec538bc2eedadc9419 |
nettle_3.5.1+really3.5.1.orig.tar.gz.asc | 573 bytes | 557116e471c7c4556148866b5cec056d6de5f26d080e5930154018be6a9d893e |
nettle_3.5.1+really3.5.1-2ubuntu0.1.debian.tar.xz | 23.5 KiB | 0e962c65db51c6d21bf77079f13fb135a2d5de165c77a93575f5a74f24b9d247 |
nettle_3.5.1+really3.5.1-2ubuntu0.1.dsc | 2.4 KiB | e5adc536c01a37938b8744814e867e918b67c60656d11558703280eb9b027bf5 |
Available diffs
Binary packages built by this source
- libhogweed5: low level cryptographic library (public-key cryptos)
Nettle is a cryptographic library that is designed to fit easily in more or
less any context: In crypto toolkits for object-oriented languages (C++,
Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel
space.
.
It tries to solve a problem of providing a common set of cryptographic
algorithms for higher-level applications by implementing a
context-independent set of cryptographic algorithms. In that light, Nettle
doesn't do any memory allocation or I/O, it simply provides the
cryptographic algorithms for the application to use in any environment and
in any way it needs.
.
This package contains the asymmetric cryptographic algorithms, which,
require the GNU multiple precision arithmetic library (libgmp) for
their large integer computations.
- libhogweed5-dbgsym: debug symbols for libhogweed5
- libnettle7: low level cryptographic library (symmetric and one-way cryptos)
Nettle is a cryptographic library that is designed to fit easily in more or
less any context: In crypto toolkits for object-oriented languages (C++,
Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel
space.
.
It tries to solve a problem of providing a common set of cryptographic
algorithms for higher-level applications by implementing a
context-independent set of cryptographic algorithms. In that light, Nettle
doesn't do any memory allocation or I/O, it simply provides the
cryptographic algorithms for the application to use in any environment and
in any way it needs.
.
This package contains the symmetric and one-way cryptographic
algorithms. To avoid having this package depend on libgmp, the
asymmetric cryptos reside in a separate library, libhogweed.
- libnettle7-dbgsym: debug symbols for libnettle7
- nettle-bin: low level cryptographic library (binary tools)
Nettle is a cryptographic library that is designed to fit easily in more or
less any context: In crypto toolkits for object-oriented languages (C++,
Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel
space.
.
It tries to solve a problem of providing a common set of cryptographic
algorithms for higher-level applications by implementing a
context-independent set of cryptographic algorithms. In that light, Nettle
doesn't do any memory allocation or I/O, it simply provides the
cryptographic algorithms for the application to use in any environment and
in any way it needs.
.
This package contains binary utilities that accompany the library:
.
- nettle-lfib-stream - generates a pseudo-random stream, using the Knuth
lfib (non-cryptographic) pseudo-random generator.
- sexp-conv - conversion tool for handling the different flavours of sexp
syntax.
- pkcs1-conv - converts PKCS#1 keys to sexp format.
- nettle-hash - command-line tool to compute message digests such as SHA-1.
- nettle-bin-dbgsym: debug symbols for nettle-bin
- nettle-dev: low level cryptographic library (development files)
Nettle is a cryptographic library that is designed to fit easily in more or
less any context: In crypto toolkits for object-oriented languages (C++,
Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel
space.
.
It tries to solve a problem of providing a common set of cryptographic
algorithms for higher-level applications by implementing a
context-independent set of cryptographic algorithms. In that light, Nettle
doesn't do any memory allocation or I/O, it simply provides the
cryptographic algorithms for the application to use in any environment and
in any way it needs.
.
This package contains the development files (C headers and static libraries)