Debian Package Tracker

general

source: nettle (main)
version: 3.4.1-1
maintainer: Magnus Holmgren [DMD]
arch: any
std-ver: 4.1.2
VCS: Subversion (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 2.7.1-5+deb8u2
stable: 3.3-1
testing: 3.4.1-1
unstable: 3.4.1-1

versioned links

2.7.1-5+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.4.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libhogweed4
libnettle6
nettle-bin
nettle-dev

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

more than one main upstream tarballs listed.

Created: 2019-01-28 Last update: 2019-05-21 14:02

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

svn: E170013: Unable to connect to a repository at URL 'svn://svn.kibibyte.se/nettle/trunk/debian' svn: E000113: Can't connect to host 'svn.kibibyte.se': No route to host

Created: 2019-05-20 Last update: 2019-05-20 17:52

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-04-07 Last update: 2019-04-07 07:37

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-16869: A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

Please fix it.

Created: 2018-12-03 Last update: 2019-03-08 13:36

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-16869: A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

Please fix it.

Created: 2018-12-03 Last update: 2019-03-08 13:36

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:22

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.3.0 instead of 4.1.2).

Created: 2018-04-16 Last update: 2019-01-27 03:31

news

[rss feed]

[2019-02-06] nettle 3.4.1-1 MIGRATED to testing (Debian testing watch)
[2019-01-26] Accepted nettle 3.4.1-1 (source amd64) into unstable (Magnus Holmgren)
[2018-12-17] nettle 3.4.1~rc1-1 MIGRATED to testing (Debian testing watch)
[2018-12-04] Accepted nettle 3.4.1~rc1-1 (source amd64) into unstable (Magnus Holmgren)
[2017-12-23] nettle 3.4-1 MIGRATED to testing (Debian testing watch)
[2017-12-12] Accepted nettle 3.4-1 (source amd64) into unstable (Magnus Holmgren)
[2017-09-22] nettle 3.3-2 MIGRATED to testing (Debian testing watch)
[2017-09-11] Accepted nettle 3.3-2 (source amd64) into unstable (Magnus Holmgren)
[2016-11-06] Accepted nettle 2.7.1-5+deb8u2 (source amd64) into proposed-updates->stable-new, proposed-updates (Magnus Holmgren)
[2016-10-13] nettle 3.3-1 MIGRATED to testing (Debian testing watch)
[2016-10-02] Accepted nettle 3.3-1 (source amd64) into unstable (Magnus Holmgren)
[2016-08-11] Accepted nettle 2.4-3+deb7u1 (source amd64) into oldstable (Ola Lundqvist)
[2016-02-24] Accepted nettle 2.7.1-5+deb8u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Magnus Holmgren)
[2016-02-12] nettle 3.2-1 MIGRATED to testing (Debian testing watch)
[2016-02-06] Accepted nettle 3.2-1 (source amd64) into unstable (Magnus Holmgren)
[2015-08-14] nettle 3.1.1-4 MIGRATED to testing (Britney)
[2015-08-03] Accepted nettle 3.1.1-4 (source amd64) into unstable (Magnus Holmgren)
[2015-06-09] nettle 3.1.1-3 MIGRATED to testing (Britney)
[2015-06-01] Accepted nettle 3.1.1-3 (source amd64) into unstable (Magnus Holmgren)
[2015-05-15] Accepted nettle 3.1.1-2 (source amd64) into experimental (Magnus Holmgren)
[2015-05-14] Accepted nettle 3.1.1-1 (source amd64) into experimental (Magnus Holmgren)
[2015-05-06] Accepted nettle 3.1-1 (source amd64) into experimental, experimental (Magnus Holmgren)
[2015-01-17] nettle 2.7.1-5 MIGRATED to testing (Britney)
[2015-01-11] Accepted nettle 2.7.1-5 (source amd64) into unstable (Magnus Holmgren)
[2014-12-26] nettle 2.7.1-4 MIGRATED to testing (Britney)
[2014-12-21] Accepted nettle 2.7.1-4 (source amd64) into unstable (Magnus Holmgren)
[2014-08-09] nettle 2.7.1-3 MIGRATED to testing (Britney)
[2014-07-30] Accepted nettle 2.7.1-3 (source amd64) into unstable (Magnus Holmgren)
[2014-07-05] Accepted nettle 3.0-2 (source amd64) (Magnus Holmgren)
[2014-06-09] Accepted nettle 3.0-1 (source amd64) (Magnus Holmgren)

bugs [bug history graph]

all: 6
RC: 0
I&N: 3
M&W: 3
F&P: 0
patch: 0

links

homepage
lintian (0, 2)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.4.1-1
3 bugs