Format: 1.8
Date: Tue, 19 Feb 2019 14:41:32 +0100
Source: nss
Binary: libnss3 libnss3-1d libnss3-nssdb libnss3-tools libnss3-dev libnss3-dbg
Architecture: i386 all
Version: 2:3.28.4-0ubuntu0.14.04.5
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-030.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 libnss3    - Network Security Service libraries
 libnss3-1d - Network Security Service libraries - transitional package
 libnss3-dbg - Debugging symbols for the Network Security Service libraries
 libnss3-dev - Development files for the Network Security Service libraries
 libnss3-nssdb - Network Security Security libraries - shared databases
 libnss3-tools - Network Security Service tools
Changes: 
 nss (2:3.28.4-0ubuntu0.14.04.5) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: DoS in NULL pointer dereference in CMS functions
     - debian/patches/CVE-2018-18508-1.patch: add null checks in
       nss/lib/smime/cmscinfo.c, nss/lib/smime/cmsdigdata.c,
       nss/lib/smime/cmsencdata.c, nss/lib/smime/cmsenvdata.c,
       nss/lib/smime/cmsmessage.c, nss/lib/smime/cmsudf.c.
     - debian/patches/CVE-2018-18508-2.patch: add null checks in
       nss/lib/smime/cmsmessage.c.
     - CVE-2018-18508
Checksums-Sha1: 
 7da62f089f409dd77a25e446ef278ed297690089 1088040 libnss3_3.28.4-0ubuntu0.14.04.5_i386.deb
 88e5409dd7e897696492abab0a8dcbc7dca1e432 9308 libnss3-1d_3.28.4-0ubuntu0.14.04.5_i386.deb
 d9164e3a0867f474a2c02419c5bb8c06705e62b6 10558 libnss3-nssdb_3.28.4-0ubuntu0.14.04.5_all.deb
 3db6e17808ebe19988bc85ec2054a88f2d66c0d2 752042 libnss3-tools_3.28.4-0ubuntu0.14.04.5_i386.deb
 08f90e1285cd4c50501f877a2bcb0c4d232cbca0 221284 libnss3-dev_3.28.4-0ubuntu0.14.04.5_i386.deb
 0ed3bd580069c180344c82fbbf63fa9fd2d59abf 7777508 libnss3-dbg_3.28.4-0ubuntu0.14.04.5_i386.deb
 0b87eff0788bb0373be6fd002bac8d497c4895ef 2310574 libnss3-dbgsym_3.28.4-0ubuntu0.14.04.5_i386.ddeb
 67de81740cb3d791b7062decc308a9ce3f8e832c 2319244 libnss3-tools-dbgsym_3.28.4-0ubuntu0.14.04.5_i386.ddeb
Checksums-Sha256: 
 e482c0ea18f63966a3b1d09a0237db81163bf464d704d756a4f8489ac5ef5dca 1088040 libnss3_3.28.4-0ubuntu0.14.04.5_i386.deb
 7b80eed49225567d39e56d824deca31249b92e6e4b78641d5f80d26860b932a9 9308 libnss3-1d_3.28.4-0ubuntu0.14.04.5_i386.deb
 769cda9ab6d5dbd5f92948f0508f05b95b1a1c235d90d3ff862bbfdd644c8d92 10558 libnss3-nssdb_3.28.4-0ubuntu0.14.04.5_all.deb
 8245412477945372da072e1af98bea6cb227ca2c4bbe83836d315de6b48f3119 752042 libnss3-tools_3.28.4-0ubuntu0.14.04.5_i386.deb
 86826062009bbcccbe4fdfa68b00bb10e21c0fa473efec69ff74e58b8c3ac369 221284 libnss3-dev_3.28.4-0ubuntu0.14.04.5_i386.deb
 d1ede9286cc453c7b3c547ca52a05ec1a646b5aa5c93e7e789789a0a944a30be 7777508 libnss3-dbg_3.28.4-0ubuntu0.14.04.5_i386.deb
 cf234ea4be4ea65e6d75c7af533aaccd637d8d563cec527ee554287c28d4f077 2310574 libnss3-dbgsym_3.28.4-0ubuntu0.14.04.5_i386.ddeb
 4a7ff7f7542042ce750414a267ac9d62b7ab38d3adad2bd261a48adf096e0a39 2319244 libnss3-tools-dbgsym_3.28.4-0ubuntu0.14.04.5_i386.ddeb
Files: 
 5df2aaebc562ba219b999c08799d2a24 1088040 libs optional libnss3_3.28.4-0ubuntu0.14.04.5_i386.deb
 fa9673d706287cce3d0c41ba157a2e04 9308 oldlibs extra libnss3-1d_3.28.4-0ubuntu0.14.04.5_i386.deb
 13acc20cc21b9b88f4d09c32f772a5ec 10558 admin optional libnss3-nssdb_3.28.4-0ubuntu0.14.04.5_all.deb
 c06dffc5e60b60a76075d6c5b25bdd85 752042 admin optional libnss3-tools_3.28.4-0ubuntu0.14.04.5_i386.deb
 1f08d9731b9156621a75e08196262eda 221284 libdevel optional libnss3-dev_3.28.4-0ubuntu0.14.04.5_i386.deb
 68e46f3970b8dd7890f8ab0d0dabd88f 7777508 debug extra libnss3-dbg_3.28.4-0ubuntu0.14.04.5_i386.deb
 4704030cf79fe674673f764b3be9e32f 2310574 libs extra libnss3-dbgsym_3.28.4-0ubuntu0.14.04.5_i386.ddeb
 dbdac20521e2b7e10352eccf30689296 2319244 admin extra libnss3-tools-dbgsym_3.28.4-0ubuntu0.14.04.5_i386.ddeb
Original-Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org>