kumquat-buildroot/package/libnss
Gustavo Zacarias 6efc256a77 libnss: security bump to version 3.17.3
Fixes CVE-2014-1569 - The definite_length_decoder function in
lib/util/quickder.c in Mozilla Network Security Services (NSS) before
3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding
of an ASN.1 length is properly formed, which allows remote attackers to
conduct data-smuggling attacks by using a long byte sequence for an
encoding.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-12-16 23:48:32 +01:00
..
Config.in
libnss-0001-cross-compile.patch
libnss-0002-uclibc.patch
libnss.hash libnss: security bump to version 3.17.3 2014-12-16 23:48:32 +01:00
libnss.mk libnss: security bump to version 3.17.3 2014-12-16 23:48:32 +01:00
nss.pc.in