ALT-PU-2016-1076: package nettle update to version 3.2-alt1
Описание
This update upgrades nettle to version 3.2-alt1.
Устраненные уязвимости6
Связанные уязвимости
ELSA-2016-2582: nettle security and bug fix update (MODERATE)
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.