DLA-2997-1 ecdsautils - security update

Bulletin has no description...

CVE-2022-24884

ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. ecdsaverifypreparelegacy does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple...

CVE-2022-24884

ecdsautils is a tiny collection of programs used for ECDSA keygen, sign, verify. "ecdsaverifypreparelegacy" does not check whether the signature values "r" and "s" are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring...