Format: 1.8
Date: Tue, 19 Feb 2019 13:39:44 +0100
Source: nss
Binary: libnss3 libnss3-1d libnss3-nssdb libnss3-tools libnss3-dev libnss3-dbg
Architecture: amd64 all
Version: 2:3.28.4-0ubuntu0.16.04.5
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-033.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libnss3    - Network Security Service libraries
 libnss3-1d - Network Security Service libraries - transitional package
 libnss3-dbg - Debugging symbols for the Network Security Service libraries
 libnss3-dev - Development files for the Network Security Service libraries
 libnss3-nssdb - Network Security Security libraries - shared databases
 libnss3-tools - Network Security Service tools
Changes:
 nss (2:3.28.4-0ubuntu0.16.04.5) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: DoS in NULL pointer dereference in CMS functions
     - debian/patches/CVE-2018-18508-1.patch: add null checks in
       nss/lib/smime/cmscinfo.c, nss/lib/smime/cmsdigdata.c,
       nss/lib/smime/cmsencdata.c, nss/lib/smime/cmsenvdata.c,
       nss/lib/smime/cmsmessage.c, nss/lib/smime/cmsudf.c.
     - debian/patches/CVE-2018-18508-2.patch: add null checks in
       nss/lib/smime/cmsmessage.c.
     - CVE-2018-18508
Checksums-Sha1:
 0589b42ef0b56218fa900a5b9bb760f37f3feeef 9316 libnss3-1d_3.28.4-0ubuntu0.16.04.5_amd64.deb
 ec0989e7bb413809290ed83cda825faa60743e0d 8483214 libnss3-dbg_3.28.4-0ubuntu0.16.04.5_amd64.deb
 bc3353e5301d82038fa2a9be9396106a8d6d05a7 2541186 libnss3-dbgsym_3.28.4-0ubuntu0.16.04.5_amd64.ddeb
 4df361cf8fcb1490505c4356b7df2e176270b95e 230602 libnss3-dev_3.28.4-0ubuntu0.16.04.5_amd64.deb
 b310fe160b7c730ac1825f62ad5151abca1c9be2 10592 libnss3-nssdb_3.28.4-0ubuntu0.16.04.5_all.deb
 8e27720c48495215097048a1efdb5ce07d27a09e 2633186 libnss3-tools-dbgsym_3.28.4-0ubuntu0.16.04.5_amd64.ddeb
 f0ac739b450abb3941a7c3b645670998d6486a1b 841024 libnss3-tools_3.28.4-0ubuntu0.16.04.5_amd64.deb
 e0fd339a8d48bf2e3766afeee510ec0cd197f90e 1148166 libnss3_3.28.4-0ubuntu0.16.04.5_amd64.deb
Checksums-Sha256:
 3f85bb9415ae554eb8950a7ebd6d7fe8def5b6372412ec6abcaeed2acfd820c1 9316 libnss3-1d_3.28.4-0ubuntu0.16.04.5_amd64.deb
 d82bffd7b81ba97534e11ea5b463770a151a28f9549a86654548b4b378d25f6e 8483214 libnss3-dbg_3.28.4-0ubuntu0.16.04.5_amd64.deb
 9430b63e7d1e232b6c4de87364ab8a0b48cc6caf9d72abc947d6ea426c91c2d8 2541186 libnss3-dbgsym_3.28.4-0ubuntu0.16.04.5_amd64.ddeb
 eb65bf981704e2537cb46c1a5fa119b278653bf21037dba0e8dafad099f50d09 230602 libnss3-dev_3.28.4-0ubuntu0.16.04.5_amd64.deb
 69f3372af2ec135f2021ed678b7bb15376c11113cc929eed5f651f4124fdd26a 10592 libnss3-nssdb_3.28.4-0ubuntu0.16.04.5_all.deb
 e43b1e83bdc1f1f9bfd41272526cd6170ff65f5cd3590cb60293e1ae322f66d0 2633186 libnss3-tools-dbgsym_3.28.4-0ubuntu0.16.04.5_amd64.ddeb
 65fec47ad9b8c699391f887eb2d90f7cc929899cc3c2728c0293bfc2181d8d85 841024 libnss3-tools_3.28.4-0ubuntu0.16.04.5_amd64.deb
 49df7411f6f56a416c3b46c0bea87e778f6328ad0cfb6bb80bd68d536c6c0367 1148166 libnss3_3.28.4-0ubuntu0.16.04.5_amd64.deb
Files:
 95f5bda45a95d9cb67be11c4839493c9 9316 oldlibs extra libnss3-1d_3.28.4-0ubuntu0.16.04.5_amd64.deb
 219c85dadaa02919ba608ee52a644c08 8483214 debug extra libnss3-dbg_3.28.4-0ubuntu0.16.04.5_amd64.deb
 5d9b5df0256fd8ac913c420ae334305f 2541186 libs extra libnss3-dbgsym_3.28.4-0ubuntu0.16.04.5_amd64.ddeb
 5bee212c885f577013ceab56b70f075b 230602 libdevel optional libnss3-dev_3.28.4-0ubuntu0.16.04.5_amd64.deb
 c114c1b3913297d849c06eb63395e2be 10592 admin optional libnss3-nssdb_3.28.4-0ubuntu0.16.04.5_all.deb
 3a3ee0f091a2b553f62ccb24daca600b 2633186 admin extra libnss3-tools-dbgsym_3.28.4-0ubuntu0.16.04.5_amd64.ddeb
 678bf03011178c15aff816564ab8bcbf 841024 admin optional libnss3-tools_3.28.4-0ubuntu0.16.04.5_amd64.deb
 a97678e9bb2c377802c81e298b295e6d 1148166 libs optional libnss3_3.28.4-0ubuntu0.16.04.5_amd64.deb
Original-Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org>