Information on source package nettle

Available versions

ReleaseVersion
jessie2.7.1-5+deb8u3
stretch3.3-1+deb9u1
buster3.4.1-1+deb10u1
bullseye3.7.3-1
bookworm3.8.1-2
trixie3.9.1-2
sid3.9.1-2.2

Open issues

BugjessiestretchbusterbullseyebookwormtrixiesidDescription
CVE-2018-16869vulnerable (no DSA)vulnerable (no DSA)fixedfixedfixedfixedfixedA Bleichenbacher type side-channel based padding oracle attack was fou ...

Resolved issues

BugDescription
CVE-2023-36660The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory ...
CVE-2021-20305A flaw was found in Nettle in versions before 3.7.2, where several Net ...
CVE-2021-3580A flaw was found in the way nettle's RSA decryption functions handled ...
CVE-2016-6489The RSA and DSA decryption code in Nettle makes it easier for attacker ...
CVE-2015-8805The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not p ...
CVE-2015-8804x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle ...
CVE-2015-8803The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not p ...

Security announcements

DSA / DLADescription
ELA-485-1nettle - security update
DLA-2760-1nettle - security update
DSA-4933-1nettle - security update
DLA-593-1nettle - security update

Search for package or bug name: Reporting problems