Skip to content
OpenAdvisories
Unscored RHSA-2016:2582 4 CVEs

Red Hat Security Advisory: nettle security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client nettle 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::client nettle-debuginfo 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::client nettle-devel 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode nettle 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode nettle-debuginfo 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode nettle-devel 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::server nettle 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::server nettle-debuginfo 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::server nettle-devel 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation nettle 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation nettle-debuginfo 0:2.7.1-8.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation nettle-devel 0:2.7.1-8.el7

Vulnerabilities 4

  • Unscored —
    CVE-2015-8803

    The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…

    nettle nettle Debian Ubuntu
  • Unscored —
    CVE-2015-8804

    x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output i…

    nettle nettle Debian Ubuntu
  • Unscored —
    CVE-2015-8805

    The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…

    nettle nettle Debian Ubuntu
  • Unscored —
    CVE-2016-6489

    The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side chann…

    nettle nettle Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252936
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1304303
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1304379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1304382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1362016
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2582.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-8803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8803
  • article
    https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-8804
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8804
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8804
  • article
    https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003024.html
  • report
    https://access.redhat.com/security/cve/CVE-2015-8805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-8805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-8805
  • report
    https://access.redhat.com/security/cve/CVE-2016-6489
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-6489
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-6489