Red Hat Security AdvisoryRHSA-2021:1145
nettle security update
Released 2021-04-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nettle-2.7.1-9.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) nettle-devel-2.7.1-9.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nettle-devel-2.7.1-9.el7_9
- Red Hat Enterprise Linux Server (v. 7) nettle-2.7.1-9.el7_9, nettle-2.7.1-9.el7_9.ppc, nettle-devel-2.7.1-9.el7_9 +1
- Red Hat Enterprise Linux Workstation (v. 7) nettle-2.7.1-9.el7_9, nettle-devel-2.7.1-9.el7_9
Fixes 1 record
Priority LOW 39
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called wi…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01742 · Published 2021-04-05 · Fixed CWE-327
