Ubuntu: 3193-1 High: Nettle Information Exposure Threat

ubuntu

February 6, 2017

Nettle could be made to expose sensitive information over the network.

Summary

Nettle could be made to expose sensitive information over the network.

Software Description:

- nettle: low level cryptographic library (public-key cryptos)

Details:

It was discovered that Nettle incorrectly mitigated certain timing

side-channel attacks. A remote attacker could possibly use this flaw to

recover private keys.

Topics Covered

security advisory high update instructions information exposure ubuntu nettle

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  libnettle6                      3.2-1ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  libnettle6                      3.2-1ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  libnettle4                      2.7.1-1ubuntu0.2

Ubuntu 12.04 LTS:
  libnettle4                      2.4-1ubuntu0.1

In general, a standard system update will make all the necessary changes.