Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1481-1

Опубликовано: 02 июн. 2017
Источник: suse-cvrf

Описание

Security update for libnettle

This update for libnettle fixes the following issues:

  • CVE-2016-6489:
  • Reject invalid RSA keys with even modulo.
  • Check for invalid keys, with even p, in dsa_sign().
  • Use function mpz_powm_sec() instead of mpz_powm() (bsc#991464).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
libhogweed2-2.7.1-12.1
libhogweed2-32bit-2.7.1-12.1
libnettle4-2.7.1-12.1
libnettle4-32bit-2.7.1-12.1
SUSE Linux Enterprise Server 12 SP2
libhogweed2-2.7.1-12.1
libhogweed2-32bit-2.7.1-12.1
libnettle4-2.7.1-12.1
libnettle4-32bit-2.7.1-12.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libhogweed2-2.7.1-12.1
libnettle4-2.7.1-12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libhogweed2-2.7.1-12.1
libhogweed2-32bit-2.7.1-12.1
libnettle4-2.7.1-12.1
libnettle4-32bit-2.7.1-12.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libnettle-devel-2.7.1-12.1

Ссылки

Описание

The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:libhogweed2-2.7.1-12.1
SUSE Linux Enterprise Desktop 12 SP2:libhogweed2-32bit-2.7.1-12.1
SUSE Linux Enterprise Desktop 12 SP2:libnettle4-2.7.1-12.1
SUSE Linux Enterprise Desktop 12 SP2:libnettle4-32bit-2.7.1-12.1
Ссылки