Format: 1.8
Date: Tue, 19 Feb 2019 12:04:49 +0100
Source: nss
Binary: libnss3 libnss3-dev libnss3-tools
Architecture: i386
Version: 2:3.42-1ubuntu2
Distribution: disco-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-023.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libnss3    - Network Security Service libraries
 libnss3-dev - Development files for the Network Security Service libraries
 libnss3-tools - Network Security Service tools
Changes:
 nss (2:3.42-1ubuntu2) disco; urgency=medium
 .
   * SECURITY UPDATE: DoS in NULL pointer dereference in CMS functions
     - debian/patches/CVE-2018-18508-1.patch: add null checks in
       nss/lib/smime/cmscinfo.c, nss/lib/smime/cmsdigdata.c,
       nss/lib/smime/cmsencdata.c, nss/lib/smime/cmsenvdata.c,
       nss/lib/smime/cmsmessage.c, nss/lib/smime/cmsudf.c.
     - debian/patches/CVE-2018-18508-2.patch: add null checks in
       nss/lib/smime/cmsmessage.c.
     - CVE-2018-18508
Checksums-Sha1:
 152e7497d7fe80eb6d010af8297698d98a064110 4149584 libnss3-dbgsym_3.42-1ubuntu2_i386.ddeb
 fa44a70452be52b2cc0e5ffc7dbe33e036cbec54 227832 libnss3-dev_3.42-1ubuntu2_i386.deb
 99c953e189ac80698c41588f57a768a8fd9d5983 5192440 libnss3-tools-dbgsym_3.42-1ubuntu2_i386.ddeb
 4e9a55cc50fcff6687a2090b538a5f4298f4dc5e 942604 libnss3-tools_3.42-1ubuntu2_i386.deb
 4fddb9784a4532e77e2342e5fe40446852eb0a9b 1224248 libnss3_3.42-1ubuntu2_i386.deb
 b514b79425dd67fea44204267cc4e69041ce16e7 5949 nss_3.42-1ubuntu2_i386.buildinfo
Checksums-Sha256:
 5af371f3c13cd466dc158fd65684a07120656cb9be1cdf5136362a2f35a33f0d 4149584 libnss3-dbgsym_3.42-1ubuntu2_i386.ddeb
 0c9b22bb3f8eacb108a509abe4842a68d98c32bb1ed50d6b182210330d2e277c 227832 libnss3-dev_3.42-1ubuntu2_i386.deb
 dea8b46bb8f0d8c7ff98b698bce85574d42fbaa6ed5b1f5fbbc6586724bf3902 5192440 libnss3-tools-dbgsym_3.42-1ubuntu2_i386.ddeb
 accee1c8776d6ba43c56ec1fe5831603a80a11e7ce7f8ec1f30529f7d47a8127 942604 libnss3-tools_3.42-1ubuntu2_i386.deb
 9c6898db7c40f6d0f5a9921fbd4ebc7d07015385de3a7b772a75ab3c376cb529 1224248 libnss3_3.42-1ubuntu2_i386.deb
 41b615e235de9e9cb17166ee7d2e709f51770f10e2b220ed52bec95d7d22554f 5949 nss_3.42-1ubuntu2_i386.buildinfo
Files:
 ddf7ff9b3aa505035c97e1e5f65b2a7c 4149584 debug optional libnss3-dbgsym_3.42-1ubuntu2_i386.ddeb
 9ca8136bd4ffae4305f3bc1cb41c3854 227832 libdevel optional libnss3-dev_3.42-1ubuntu2_i386.deb
 61c983cc914ec174d8b2fba02a6bf3e4 5192440 debug optional libnss3-tools-dbgsym_3.42-1ubuntu2_i386.ddeb
 c3b8cf36f527fa6a6d6e553f62a6e47e 942604 admin optional libnss3-tools_3.42-1ubuntu2_i386.deb
 efcd03a2248fb94f4baaf72013135e91 1224248 libs optional libnss3_3.42-1ubuntu2_i386.deb
 d45574dfad2d33f95c123db8ec0e2e60 5949 libs optional nss_3.42-1ubuntu2_i386.buildinfo
Original-Maintainer: Maintainers of Mozilla-related packages <team+pkg-mozilla@tracker.debian.org>