Format: 1.8
Date: Wed, 07 Apr 2021 10:12:22 -0400
Source: nettle
Binary: libhogweed5 libnettle7 nettle-bin nettle-dev
Architecture: ppc64el
Version: 3.5.1+really3.5.1-2ubuntu0.1
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-001.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libhogweed5 - low level cryptographic library (public-key cryptos)
 libnettle7 - low level cryptographic library (symmetric and one-way cryptos)
 nettle-bin - low level cryptographic library (binary tools)
 nettle-dev - low level cryptographic library (development files)
Changes:
 nettle (3.5.1+really3.5.1-2ubuntu0.1) focal-security; urgency=medium
 .
   * SECURITY UPDATE: Out of Bound memory access in signature verification
     - debian/patches/CVE-2021-20305-1.patch: new functions
       ecc_mod_mul_canonical and ecc_mod_sqr_canonical in
       curve25519-eh-to-x.c, curve448-eh-to-x.c, ecc-eh-to-a.c,
       ecc-internal.h, ecc-j-to-a.c, ecc-mod-arith.c, ecc-mul-m.c.
     - debian/patches/CVE-2021-20305-2.patch: use ecc_mod_mul_canonical for
       point comparison in eddsa-verify.c.
     - debian/patches/CVE-2021-20305-3.patch: fix bug in ecc_ecdsa_verify in
       ecc-ecdsa-verify.c, testsuite/ecdsa-sign-test.c.
     - debian/patches/CVE-2021-20305-4.patch: ensure ecdsa_sign output is
       canonically reduced in ecc-ecdsa-sign.c.
     - debian/patches/CVE-2021-20305-6.patch: similar fix for eddsa in
       eddsa-hash.c.
     - debian/libhogweed5.symbols: added new symbols.
     - CVE-2021-20305
Checksums-Sha1:
 dc4a03bccfca0d93b1c153826c92ae4a3b4e2ef6 203856 libhogweed5-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 a2078f886c1fb9988c7702d85843e3541300baa3 140164 libhogweed5_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 7eab39869b7a909945363fa2cd3420c1a7c1d0ea 281408 libnettle7-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 56770861f42d35b19e79761b06fc255b408a9985 145252 libnettle7_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 6497daf204ab4e74ae48f7ab8ae85f7bcba8b171 181232 nettle-bin-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 998cb2625a04cc08e7c4e5b8417a65c4256262ac 27936 nettle-bin_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 855550c6af00400beb570f3274ee41e52b009ccb 1023596 nettle-dev_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 68c1c4020285a72f9a8ebc2c688128c2592b18ef 7520 nettle_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.buildinfo
Checksums-Sha256:
 5199d9c1c6048f8fe163fd65a7cefd6976c854c516662bd5f2bcbe74fb7749d3 203856 libhogweed5-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 8a4c3d08d58ac756a646940770f829dfb4f0e03227bba1a033133cda5a8fced1 140164 libhogweed5_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 bb1e98fcfca5310af408c62498d033d24dd1d7ccd645ce4f46a77aa40cbe6edd 281408 libnettle7-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 f1df4685cf1581f9fe7bcc1294a57fa60403339ca9365236257846a3466dc7c4 145252 libnettle7_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 10896963f14f803d0cced2d2362843efee436b9a3c4abd021c065f9fca12ccf3 181232 nettle-bin-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 627be73b5e58c286fb5814459cca75de77d0b470388c98f643ebd6642d274d3f 27936 nettle-bin_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 da65b731573167a500d18586843dd6525f3278520fc403d74b527b3900e32710 1023596 nettle-dev_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 1453320664edb9b8d0c5a882dd10e0add9231a6a586da05c0b8e6924655bca11 7520 nettle_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.buildinfo
Files:
 59add385fd33419796d53e980f0fca4a 203856 debug optional libhogweed5-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 aabbc722fb03cb88dd9aabd9aad0d716 140164 libs optional libhogweed5_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 1cf144f74f2bcb2d16b9472c82ab6bc7 281408 debug optional libnettle7-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 6080957ba53699cd8e60fe6dfef84403 145252 libs optional libnettle7_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 a2592c588064b80c6684e1be06a6b7d0 181232 debug optional nettle-bin-dbgsym_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.ddeb
 5bda5d13b3a4229eeea96d35b22c780f 27936 misc optional nettle-bin_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 b7b4cbb948ae8b287099ab1cc8d7ea61 1023596 libdevel optional nettle-dev_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.deb
 16020305da11165f602d728f35291a30 7520 libs optional nettle_3.5.1+really3.5.1-2ubuntu0.1_ppc64el.buildinfo
Original-Maintainer: Magnus Holmgren <holmgren@debian.org>