Описание
Security update for libnettle
This update for libnettle fixes the following issues:
- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).
Список пакетов
openSUSE Leap 15.3
libhogweed4-3.4.1-4.18.1
libhogweed4-32bit-3.4.1-4.18.1
libnettle-devel-3.4.1-4.18.1
libnettle-devel-32bit-3.4.1-4.18.1
libnettle6-3.4.1-4.18.1
libnettle6-32bit-3.4.1-4.18.1
nettle-3.4.1-4.18.1
Ссылки
- E-Mail link for openSUSE-SU-2021:2143-1
- SUSE Security Ratings
- SUSE Bug 1187060
- SUSE CVE CVE-2021-3580 page
Описание
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
Затронутые продукты
openSUSE Leap 15.3:libhogweed4-3.4.1-4.18.1
openSUSE Leap 15.3:libhogweed4-32bit-3.4.1-4.18.1
openSUSE Leap 15.3:libnettle-devel-3.4.1-4.18.1
openSUSE Leap 15.3:libnettle-devel-32bit-3.4.1-4.18.1
Ссылки
- CVE-2021-3580
- SUSE Bug 1187060
- SUSE Bug 1187892