drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Speicherzugriffsfehler in Nettle
Name: |
Speicherzugriffsfehler in Nettle |
|
ID: |
USN-4906-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 20.10 |
|
Datum: |
Di, 13. April 2021, 23:55 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20305 |
|
Applikationen: |
Nettle |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============0878107603568278333== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="N8G6vb2MDIosQ9cpSWWlhfOCmRGnATtw9"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --N8G6vb2MDIosQ9cpSWWlhfOCmRGnATtw9 Content-Type: multipart/mixed; boundary="5xeC9DJ0Iu6vCtJ4rRCcW7LFewCo9BvFv"; protected-headers="v1" From: Marc Deslauriers <marc.deslauriers@canonical.com> Reply-To: Ubuntu Security <security@ubuntu.com> To: "ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com> Message-ID: <e721a9ac-acae-6e64-10b0-e83d5c4443d2@canonical.com> Subject: [USN-4906-1] Nettle vulnerability
--5xeC9DJ0Iu6vCtJ4rRCcW7LFewCo9BvFv Content-Type: text/plain; charset=utf-8 Content-Language: en-C Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-4906-1 April 13, 2021
nettle vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS
Summary:
Nettle could be made to crash or bypass signature verification if it opened a specially crafted certificate.
Software Description: - nettle: low level cryptographic library
Details:
It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash, resulting in a denial of service, or possibly force invalid signatures.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.10: libnettle8 3.6-2ubuntu0.1
Ubuntu 20.04 LTS: libnettle7 3.5.1+really3.5.1-2ubuntu0.1
Ubuntu 18.04 LTS: libnettle6 3.4-1ubuntu0.1
Ubuntu 16.04 LTS: libnettle6 3.2-1ubuntu0.16.04.2
In general, a standard system update will make all the necessary changes.
References: https://ubuntu.com/security/notices/USN-4906-1 CVE-2021-20305
Package Information: https://launchpad.net/ubuntu/+source/nettle/3.6-2ubuntu0.1 https://launchpad.net/ubuntu/+source/nettle/3.5.1+really3.5.1-2ubuntu0.1 https://launchpad.net/ubuntu/+source/nettle/3.4-1ubuntu0.1 https://launchpad.net/ubuntu/+source/nettle/3.2-1ubuntu0.16.04.2
--5xeC9DJ0Iu6vCtJ4rRCcW7LFewCo9BvFv--
--N8G6vb2MDIosQ9cpSWWlhfOCmRGnATtw9 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature"
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAmB1zmcACgkQZWnYVadE vpOCqg//XqjgItsksKF7xpnQFxj3UOHghyX7S1xUA3do1vkUuq2LBegx14b5iZmg CggoW9sxIgGYNYDwkk7AzCHO5dL0lLhSpZXSU0huNgE1Edg4x7NTyQdfrYeNQ6Pv rh1/a5jKgC55/k0qoiV2VqN8HpDkXMcxaj8SkYAgM9T3OxVycKMRfc1Xe2GTZ85m 0wQ7ddgbH9xox/O/uJhmhRnd4MJ2YMr5XAXOCgR6OycXDSdE72271xEebTH+p5BC 62m3nFyf+DOgz0pmppYsIvh6v4H5WcoTXB7BSNc0dxsPsLn4xvB4Mic/nbEBO21E A6O+jyHejh6sXiyNerwSNUZXq29u8RiMYc/KERxYnOkVcG26Jr8WfI1uRIGsXlOg S+BubPNA/smZjAFWfpt4/Npm/Ev5btd0GPRZjmp0sk9D55UsaHqRyoZJewJ7rhgR 7NXT5m5aOABKYlJ2taJsR4XECsZvm5gdWcrzFZIQp8szSoObkxRk0b4k+0ARpTFT /6qJ84wP9E4l2ZUn0jRF0OWoqS+bIlz4sLVLyo0AOHDnn4cVULDjK5jQnc8cB85E V5oIEc9SDd2XRyp9cMtlGImXfZkjF2x9tkmnMfgfhQhVOnrweKvFKvee0iovj8kw 4N3BrQN81i2m06yBDam/o/Kp+XbI+TmJHYCGLpfkiG7T21GM9K4= =AsKF -----END PGP SIGNATURE-----
--N8G6vb2MDIosQ9cpSWWlhfOCmRGnATtw9--
--===============0878107603568278333== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5 LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj dXJpdHktYW5ub3VuY2UK
--===============0878107603568278333==--
|
|
|
|