[Secure-testing-team] Bug#813679: nettle: CVE-2015-8803 CVE-2015-8804 CVE-2015-8805

[Salvatore Bonaccorso]

Source: nettle
Version: 2.7.1-1
Severity: important
Tags: security upstream patch

Hi,

the following vulnerabilities were published for nettle.

CVE-2015-8803[0]:
secp256 calculation bug

CVE-2015-8804[1]:
Miscalculations on secp384 curve

CVE-2015-8805[2]:
miscomputation bugs in secp-256r1 modulo functions

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-8803
[1] https://security-tracker.debian.org/tracker/CVE-2015-8804
[2] https://security-tracker.debian.org/tracker/CVE-2015-8805

Regards,
Salvatore