Accepting request 887818 from security:tls

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/887818
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libnettle?expand=0&rev=38
This commit is contained in:
Dominique Leuenberger 2021-04-22 16:03:36 +00:00 committed by Git OBS Bridge
commit be07603a7c

View File

@ -4,7 +4,7 @@ Sun Mar 21 10:17:35 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
- GNU Nettle 3.7.2: - GNU Nettle 3.7.2:
* fix a bug in ECDSA signature verification that could lead to a * fix a bug in ECDSA signature verification that could lead to a
denial of service attack (via an assertion failure) or possibly denial of service attack (via an assertion failure) or possibly
incorrect results (boo#1183835) incorrect results (CVE-2021-20305, boo#1184401)
* fix a few related problems where scalars are required to be * fix a few related problems where scalars are required to be
canonically reduced modulo the ECC group order, but in fact may canonically reduced modulo the ECC group order, but in fact may
be slightly larger be slightly larger