< back to search

shield Security update for libnettle
SUSE-SLE-SERVER-12-SP2-2017-910

This update for libnettle fixes the following issues: - CVE-2016-6489: * Reject invalid RSA keys with even modulo. * Check for invalid keys, with even p, in dsa_sign(). * Use function mpz_powm_sec() instead of mpz_powm() (bsc#991464).

  • Release Date
    Jun 2 2017
  • References
    Bugzilla: 991464
    CVEs: CVE-2016-6489
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le
  • Packages
    libhogweed2
    Cryptographic Library for Public Key Algorithms
    2.7.1-12.1 lock rpm
    libnettle
    Cryptographic Library
    2.7.1-12.1 lock src
    libnettle4
    Cryptographic Library
    2.7.1-12.1 lock rpm
SUSE Linux Enterprise Server 12.2 aarch64
  • Packages
    libhogweed2
    Cryptographic Library for Public Key Algorithms
    2.7.1-12.1 lock rpm
    libnettle
    Cryptographic Library
    2.7.1-12.1 lock src
    libnettle4
    Cryptographic Library
    2.7.1-12.1 lock rpm
SUSE Linux Enterprise Server 12.2 s390x
  • Packages
    libhogweed2
    Cryptographic Library for Public Key Algorithms
    2.7.1-12.1 lock rpm
    libhogweed2-32bit
    Cryptographic Library for Public Key Algorithms
    2.7.1-12.1 lock rpm
    libnettle
    Cryptographic Library
    2.7.1-12.1 lock src
    libnettle4
    Cryptographic Library
    2.7.1-12.1 lock rpm
    libnettle4-32bit
    Cryptographic Library
    2.7.1-12.1 lock rpm
SUSE Linux Enterprise Server 12.2 x86_64
  • Packages
    libhogweed2
    Cryptographic Library for Public Key Algorithms
    2.7.1-12.1 lock rpm
    libhogweed2-32bit
    Cryptographic Library for Public Key Algorithms
    2.7.1-12.1 lock rpm
    libnettle
    Cryptographic Library
    2.7.1-12.1 lock src
    libnettle4
    Cryptographic Library
    2.7.1-12.1 lock rpm
    libnettle4-32bit
    Cryptographic Library
    2.7.1-12.1 lock rpm