Format: 1.8
Date: Tue, 19 Feb 2019 12:04:49 +0100
Source: nss
Binary: libnss3 libnss3-dev libnss3-tools
Architecture: amd64
Version: 2:3.42-1ubuntu2
Distribution: disco-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-022.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libnss3    - Network Security Service libraries
 libnss3-dev - Development files for the Network Security Service libraries
 libnss3-tools - Network Security Service tools
Changes:
 nss (2:3.42-1ubuntu2) disco; urgency=medium
 .
   * SECURITY UPDATE: DoS in NULL pointer dereference in CMS functions
     - debian/patches/CVE-2018-18508-1.patch: add null checks in
       nss/lib/smime/cmscinfo.c, nss/lib/smime/cmsdigdata.c,
       nss/lib/smime/cmsencdata.c, nss/lib/smime/cmsenvdata.c,
       nss/lib/smime/cmsmessage.c, nss/lib/smime/cmsudf.c.
     - debian/patches/CVE-2018-18508-2.patch: add null checks in
       nss/lib/smime/cmsmessage.c.
     - CVE-2018-18508
Checksums-Sha1:
 4b0b70996038c5a417bf74f01f36088678cfd9a5 4868732 libnss3-dbgsym_3.42-1ubuntu2_amd64.ddeb
 121908c7e299875d74ab278652696a660f14a4db 224804 libnss3-dev_3.42-1ubuntu2_amd64.deb
 4bcf1f8089dc57d7eb49c966ee369e35dc5cc4f1 6090336 libnss3-tools-dbgsym_3.42-1ubuntu2_amd64.ddeb
 02b27c5d23b833aab57e8aed7b2309fe0fac8852 873256 libnss3-tools_3.42-1ubuntu2_amd64.deb
 c93f47aa3f8cd1fa14df6cc9dd1d44c6fa70d9c9 1145092 libnss3_3.42-1ubuntu2_amd64.deb
 0ab3832b50f8423921da583a58ec6dc9e0aa4b1e 6038 nss_3.42-1ubuntu2_amd64.buildinfo
Checksums-Sha256:
 87abf0574a763a9ec336b8e324221203594c13dfee646367a46d2cb7b15b93e2 4868732 libnss3-dbgsym_3.42-1ubuntu2_amd64.ddeb
 9809c9adfd90571a8481e150a3c709c0730cfde88a2eef824269d66215f80f1d 224804 libnss3-dev_3.42-1ubuntu2_amd64.deb
 6d75d07f63a14157ce49dee9563c447216dbe7f87ac661e32b05f0265a16a2cf 6090336 libnss3-tools-dbgsym_3.42-1ubuntu2_amd64.ddeb
 b6b9e9d17b5a909074a60f298f0777b140976b6d69873782b212ec6233e4b549 873256 libnss3-tools_3.42-1ubuntu2_amd64.deb
 4eff36ce4c0b63e7a3916148135b92da38d1e66a62bbebb8d4dbbe6d7b1c7b44 1145092 libnss3_3.42-1ubuntu2_amd64.deb
 69e154f803fab33ddead4e5508d7f405c02e87da039d3f9832e88e1dd966b35e 6038 nss_3.42-1ubuntu2_amd64.buildinfo
Files:
 b037d01a18cd61e3019a5e275987cba5 4868732 debug optional libnss3-dbgsym_3.42-1ubuntu2_amd64.ddeb
 b3892b11b74f37f790270482775c5277 224804 libdevel optional libnss3-dev_3.42-1ubuntu2_amd64.deb
 d70b854e26af801ee8d9938c31c9df91 6090336 debug optional libnss3-tools-dbgsym_3.42-1ubuntu2_amd64.ddeb
 1ecb0b529665bb12d11a077df0417fe5 873256 admin optional libnss3-tools_3.42-1ubuntu2_amd64.deb
 7a04983e25871117c827922e0a793cdf 1145092 libs optional libnss3_3.42-1ubuntu2_amd64.deb
 b2d613f8c9ccb9089e7be809ac6f94aa 6038 libs optional nss_3.42-1ubuntu2_amd64.buildinfo
Original-Maintainer: Maintainers of Mozilla-related packages <team+pkg-mozilla@tracker.debian.org>