projects / buildroot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cfedfde) | patch
package/libnss: security bump to version 3.42.1
authorPeter Korsgaard <peter@korsgaard.com>
Thu, 30 May 2019 23:07:41 +0000 (01:07 +0200)
committerPeter Korsgaard <peter@korsgaard.com>
Fri, 31 May 2019 08:00:52 +0000 (10:00 +0200)
commit8c0bff1b4f3f5d3c1cb3a848d65b0b11fb59b1f4
treedaffaa9fd2ae5fa7ee1dbd6ea3c9751109655db7tree
parentcfedfdee95df8878a15b4d3d11c5ca3b99481de1commit | diff
package/libnss: security bump to version 3.42.1

Fixes the following security issues:

(3.41) CVE-2018-12404: Cache side-channel variant of the Bleichenbacher
attack

(3.42.1) CVE-2018-18508: Add additional null checks to several CMS functions
to fix a rare CMS crash.  Thanks to Hanno Böck and Damian Poddebniak for the
discovery and fixes

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libnss/libnss.hash diff | blob | history
package/libnss/libnss.mk diff | blob | history