浜戝畨鍏ㄦ棩鎶�210720锛氱孩甯絅ettle瀵嗙爜搴撳彂鐜拌秺鐣屽唴瀛樿�闂�紡娲烇紝闇€瑕佸敖蹇�崌绾�

Nettle鏄�竴绉嶅瘑鐮佸簱锛屾棬鍦ㄨ交鏉鹃€傚簲鍑犱箮鎵€鏈夌幆澧冿細鍦ㄩ潰鍚戝�璞¤�瑷€锛堜緥濡侰 ++锛孭ython鎴朠ike锛夌殑瀵嗙爜宸ュ叿鍖呬腑锛屽湪LSH鎴朑NUPG涔嬬被鐨勫簲鐢ㄧ▼搴忎腑锛岀敋鑷冲湪鍐浜戝呮牳绌洪棿涓�€�

7鏈�19鏃�,RedHat(绾㈠附)鍙戝竷浜嗗畨鍏ㄦ洿鏂帮紝淇��浜哊ettle瀵嗙爜搴撲腑鍙戠幇鐨勪竴浜涢噸瑕佹紡娲炪€備互涓嬫槸婕忔礊璇︽儏锛�

婕忔礊璇︽儏

鏉ユ簮锛歨ttps://access.red畨鍏hat.com/errata/RHSA-2021:2760

CVE-2021-20305 CVSS璇勫垎锛�8.1 涓ラ噸绋嬪害锛氶珮

鍦∟ettle涓�瓨鍦ㄤ竴涓�紡娲烇紝鍏朵腑涓€浜汵ettle绛惧悕楠岃瘉鍔熻兘锛圙OST DSA锛孍ㄦ棩DDSA鍜孍CDSA锛夊�鑷存き鍦嗘洸绾垮瘑鐮佸�鐐癸紙ECC锛変箻娉曞姛鑳借�瓒呭嚭鑼冨洿璋冪敤锛屽彲鑳藉�鑷撮敊璇�殑缁撴灉銆傛�婕忔礊浣挎敾鍑昏€呭彲浠ュ己鍒朵娇鐢ㄦ棤鏁堢�鍚嶏紝浠庤€屽�鑷存柇瑷€澶辫触鎴栧彲鑳界殑楠鎶�岃瘉銆傛�婕忔礊鐨勬渶澶у▉鑳佹槸鏈哄瘑鎬э紝瀹屾暣鎬у拰绯荤粺鍙�敤鎬с€�

鍙楀奖鍝嶄骇鍝佸拰鐗堟湰

Red Hat Enterprise Linux Server - AUS 7.3 x86_64

Red Hat Enterprise Linux Se21rver - AUS 7.4 x86_64

Red Hat Enterprise Linux Server - TUS 7.4 x86_64

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services f07or SAP Solutions 7.4 ppc64le

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.4 x86_64

Red Hat Enterprise Linux for x2086_64 - Extended Update Support 7.7 x86_64

Red Hat Enterprise Linux Server - AUS 7.7 x86_64

Red Hat Enterprise Linux for IBM z Systems -锛氱 Extended Update Support 7.7 s390x

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64

Red Hat Enterpri孩甯se Linux EUS Compute Node 7.7 x86_64

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le

Red Hat En絅eterprise Linux Server - TUS 7.7 x86_64

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.7 ppc64le

Rtted Hat Enterprise Linux Server - Update Services for SAP Solutions 7.7 x86_64

瑙ｅ喅鏂规�

Redhat宸插彂甯冨畨鍏ㄦ洿鏂�,鏈夊叧濡備綍搴旂敤姝ゆ洿鏂扮殑璇︾粏淇℃伅锛岃�鍙le傞槄锛�

https://access.redhat.com/articles/11258

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鍗囩骇璇疯�闂�畼缃戯細

https://access.redhat.com/security/security-瀵嗙updates/#/security-advisories