Debian Security Advisory

DLA-593-1 nettle -- LTS security update

Date Reported:
11 Aug 2016
Affected Packages:
nettle
Vulnerable:
Yes
Security database references:
In the Debian bugtracking system: Bug 832983.
In Mitre's CVE dictionary: CVE-2016-6489.
More information:

The cryptographic library nettle had a potential information leak problem reported.

  • CVE-2016-6489

    RSA code is vulnerable to cache sharing related attacks.

For Debian 7 Wheezy, this problems has been fixed in version 2.4-3+deb7u1.

We recommend that you upgrade your nettle packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS