475 matches found
nettle security update
CentOS Errata and Security Advisory CESA-2016:2582 An update for nettle is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Fedora 25 : mingw-gnutls / mingw-nettle (2016-762cb57c92)
Nettle 3.3: https://lists.gnu.org/archive/html/info-gnu/2016-10/msg00003.html GnuTLS 3.5.5: https://lists.gnupg.org/pipermail/gnutls-devel/2016-October/008194.htm l Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
[SECURITY] Fedora 25 Update: mingw-nettle-3.3-1.fc25
Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages C++, Python, Pike, ..., in applications like LSH or GNUPG, or even in kernel space...
Oracle Linux 7 : nettle (ELSA-2016-2582)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2582 advisory. - Use a cache-silent version of mpzpowm to prevent cache-timing attacks against RSA and DSA in shared VMs. 1364897,CVE-2016-6489 Tenable has extracted...
nettle security and bug fix update
2.7.1-8 - Use a cache-silent version of mpzpowm to prevent cache-timing attacks against RSA and DSA in shared VMs. 1364897,CVE-2016-6489 2.7.1-5 - Fixed SHA-3 implementation to conform to final standard 1252936 - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues in secp256r1 and...
RHEL 7 : nettle (RHSA-2016:2582)
An update for nettle is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
RedHat Update for nettle RHSA-2016:2582-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
nettle: miscalculations on secp384 curve
x8664/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors...
Moderate: Red Hat Security Advisory: nettle security and bug fix update
An update for nettle is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
nettle: secp256 calculation bug
The ecc256modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...
nettle: secp256 calculation bug
The ecc256modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than...
MGASA-2016-0290 Updated nettle/nettle2.7 packages fix security vulnerability
The cryptographic library nettle had a potential information leak problem reported. RSA code is vulnerable to cache sharing related attacks CVE-2016-6489...
Nettle RSA Information Disclosure Vulnerability
Nettle is a library of basic cryptographic functions. An information disclosure vulnerability exists in Nettle RSA, which allows an attacker to exploit the vulnerability to obtain sensitive information...
Debian DLA-593-1 : nettle security update
The cryptographic library nettle had a potential information leak problem reported. CVE-2016-6489 RSA code is vulnerable to cache sharing related attacks. For Debian 7 'Wheezy', this problems has been fixed in version 2.4-3+deb7u1. We recommend that you upgrade your nettle packages. NOTE: Tenable...
[SECURITY] [DLA 593-1] nettle security update
Package : nettle Version : 2.4-3+deb7u1 CVE ID : CVE-2016-6489 Debian Bug : 832983 The cryptographic library nettle had a potential information leak problem reported. CVE-2016-6489 RSA code is vulnerable to cache sharing related attacks. For Debian 7 "Wheezy", this problems has been fixed in...
DLA-593-1 nettle - security update
Bulletin has no description...
Nettle RSA Code Local Information Disclosure Vulnerability
Nettle is a library of basic cryptographic functions. A local information disclosure vulnerability exists in Nettle RSA Code, which can be exploited by a local attacker to obtain sensitive information...
CVE-2016-6489
It was found that nettle's RSA and DSA decryption code was vulnerable to cache-related side channel attacks. An attacker could use this flaw to recover the private key from a co-located virtual-machine instance...
