Dr. Volker,

Three CVEs have been announced for nettle. The upstream 3.2 release includes the fixes, but that involves an ABI version bump -- and hence an immediate rebuild of the six packages which depend on nettle. In the meantime, could you also provide a 2.7.1 with the following patch:

http://pkgs.fedoraproject.org/cgit/rpms/nettle.git/plain/nettle-2.7.1-ecc-cve.patch?h=f22

TIA,

--
Yaakov

Reply via email to