Ubuntu 20.10: 4906-1 Moderate: Nettle Denial of Service Issue

ubuntu

April 13, 2021

Nettle could be made to crash or bypass signature verification if it opened a specially crafted certificate.

Summary

Nettle could be made to crash or bypass signature verification if it

opened a specially crafted certificate.

Software Description:

- nettle: low level cryptographic library

Details:

It was discovered that Nettle incorrectly handled signature verification.

A remote attacker could use this issue to cause Nettle to crash, resulting

in a denial of service, or possibly force invalid signatures.

Topics Covered

security advisory moderate denial of service security update update Ubuntu moderate severity ubuntu signature verification signature issue nettle Nettle

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  libnettle8                      3.6-2ubuntu0.1

Ubuntu 20.04 LTS:
  libnettle7                      3.5.1+really3.5.1-2ubuntu0.1

Ubuntu 18.04 LTS:
  libnettle6                      3.4-1ubuntu0.1

Ubuntu 16.04 LTS:
  libnettle6                      3.2-1ubuntu0.16.04.2

In general, a standard system update will make all the necessary changes.