Updated nettle packages fix security vulnerabilities

🗓️ 09 Feb 2016 19:05:34Reported by Gentoo FoundationType

Updated nettle packages fix carry propagation bugs in elliptic curve scalar multiplications for NIST P-256 and NIST P-38

Reporter	Title	Published	Views	Family All 78
ArchLinux	nettle: improper cryptographic calculations	3 Feb 201600:00	–	archlinux
ArchLinux	lib32-nettle: improper cryptographic calculations	3 Feb 201600:00	–	archlinux
BDU FSTEC	The vulnerability of Nettle’s cryptographic library allows a hacker to compromise the integrity, accessibility, and confidentiality of information.	17 Mar 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Nettle’s cryptographic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Mar 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Nettle’s cryptographic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Mar 201600:00	–	bdu_fstec
Tenable Nessus	CentOS 7 : nettle (CESA-2016:2582)	28 Nov 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : nettle (EulerOS-SA-2016-1061)	1 May 201700:00	–	nessus
Tenable Nessus	Fedora 23 : nettle-3.2-1.fc23 (2016-89968f88d2)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 22 : nettle-2.7.1-6.fc22 (2016-8ee88aee21)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : mingw-gnutls-3.4.9-1.fc23 / mingw-nettle-3.2-1.fc23 (2016-aa00f0631d)	4 Mar 201600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	nettle	3.0-3.1	nettle-3.0-3.1.noarch.rpm
Mageia	5	any	nettle2.7	2.7.1-6.1	nettle2.7-2.7.1-6.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2016/02/03/1
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/176807.html

09 Feb 2016 19:05Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 39.8

EPSS0.12343