09f0b8c353
Fixes: CVE-2016-1950 - heap-based buffer overflow related to the parsing of certain ASN.1 structures. An attacker could create a specially-crafted certificate which, when parsed by NSS, would cause a crash or execution of arbitrary code with the permissions of the user. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> |
||
|---|---|---|
| .. | ||
| 0001-cross-compile.patch | ||
| 0002-uclibc.patch | ||
| Config.in | ||
| libnss.hash | ||
| libnss.mk | ||
| nss.pc.in | ||