Accepting request 880401 from security:tls

OBS-URL: https://build.opensuse.org/request/show/880401
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libnettle?expand=0&rev=37

libnettle.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Sun Mar 21 10:17:35 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- GNU Nettle 3.7.2:
+  * fix a bug in ECDSA signature verification that could lead to a
+    denial of service attack (via an assertion failure) or possibly
+    incorrect results (boo#1183835)
+  * fix a few related problems where scalars are required to be 
+    canonically reduced modulo the ECC group order, but in fact may
+    be slightly larger
+
 -------------------------------------------------------------------
 Thu Feb 18 09:24:00 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
 

libnettle.spec

@@ -19,7 +19,7 @@
 %define soname 8
 %define hogweed_soname 6
 Name:           libnettle
-Version:        3.7.1
+Version:        3.7.2
 Release:        0
 Summary:        Cryptographic Library
 License:        LGPL-2.1-or-later AND GPL-2.0-or-later

nettle-3.7.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:156621427c7b00a75ff9b34b770b95d34f80ef7a55c3407de94b16cbf436c42e
-size 2380974

nettle-3.7.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8d2a604ef1cde4cd5fb77e422531ea25ad064679ff0adf956e78b3352e0ef162
+size 2382309