nss 2:3.42-1ubuntu2 source package in Ubuntu

Changelog

nss (2:3.42-1ubuntu2) disco; urgency=medium

  * SECURITY UPDATE: DoS in NULL pointer dereference in CMS functions
    - debian/patches/CVE-2018-18508-1.patch: add null checks in
      nss/lib/smime/cmscinfo.c, nss/lib/smime/cmsdigdata.c,
      nss/lib/smime/cmsencdata.c, nss/lib/smime/cmsenvdata.c,
      nss/lib/smime/cmsmessage.c, nss/lib/smime/cmsudf.c.
    - debian/patches/CVE-2018-18508-2.patch: add null checks in
      nss/lib/smime/cmsmessage.c.
    - CVE-2018-18508

 -- Marc Deslauriers <email address hidden>  Tue, 19 Feb 2019 12:04:49 +0100

Upload details

Uploaded by:
Marc Deslauriers on 2019-02-19
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Eoan release on 2019-04-18 main libs
Disco release on 2019-02-20 main libs

Downloads

File Size SHA-256 Checksum
nss_3.42.orig.tar.gz 22.3 MiB 5d3ce489f11803c66a7fba773c3f9b9a428ff3e5fe67a974e88b5e9095072f13
nss_3.42-1ubuntu2.debian.tar.xz 23.6 KiB 17f5239008002ebb36f253c729d82aac95f2c75c11128bbc87e766ca9e820748
nss_3.42-1ubuntu2.dsc 2.2 KiB 9ed03daf4c9b13902885075fe14e3fc309f5e2fdef8738904465ebacd41898bb

View changes file

Binary packages built by this source

libnss3: Network Security Service libraries

 This is a set of libraries designed to support cross-platform development
 of security-enabled client and server applications. It can support SSLv2
 and v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
 other security standards.

libnss3-dbgsym: debug symbols for libnss3
libnss3-dev: Development files for the Network Security Service libraries

 This is a set of libraries designed to support cross-platform development
 of security-enabled client and server applications. It can support SSLv2
 and v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
 other security standards.
 .
 Install this package if you wish to develop your own programs using the
 Network Security Service Libraries.

libnss3-tools: Network Security Service tools

 This is a set of tools on top of the Network Security Service libraries.
 This package includes:
  * certutil: manages certificate and key databases (cert7.db and key3.db)
  * modutil: manages the database of PKCS11 modules (secmod.db)
  * pk12util: imports/exports keys and certificates between the cert/key
    databases and files in PKCS12 format.
  * shlibsign: creates .chk files for use in FIPS mode.
  * signtool: creates digitally-signed jar archives containing files and/or
    code.
  * ssltap: proxy requests for an SSL server and display the contents of
    the messages exchanged between the client and server.

libnss3-tools-dbgsym: debug symbols for libnss3-tools