Format: 1.8
Date: Wed, 05 Aug 2020 15:28:48 -0300
Source: nss
Binary: libnss3 libnss3-dev libnss3-tools
Architecture: riscv64
Version: 2:3.49.1-1ubuntu1.4
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@riscv64-qemu-lcy01-089.buildd>
Changed-By: Leonidas S. Barbosa <leo.barbosa@canonical.com>
Description:
 libnss3    - Network Security Service libraries
 libnss3-dev - Development files for the Network Security Service libraries
 libnss3-tools - Network Security Service tools
Changes:
 nss (2:3.49.1-1ubuntu1.4) focal-security; urgency=medium
 .
   * SECURITY UPDATE: Side-channel attack
     - debian/patches/CVE-2020-12400-and-6829-*.patch: use constant-time
       P-384 and P-521 in nss/lib/freebl/ecl/ecl-priv.h, nss/lib/freebl/ecl/ecl.c,
       nss/lib/freebl/ecl/ecl_spec384r1.c, nss/lib/freebl/freebl_base.gypi,
       nss/lib/freebl/manifest.mn, nss/test/ec/ectest.sh.
     - CVE-2020-12400
     - CVE-2020-6829
   * SECURITY UPDATE: Timing attack mitigation bypass
     - debian/patches/CVE-2020-12401.patch: remove unnecessary scalar
       padding in nss/lib/freebl/ec.c.
     - CVE-2020-12401
Checksums-Sha1:
 9a2e98a2205f1d45d8fc289460706f4614b60db3 4941308 libnss3-dbgsym_3.49.1-1ubuntu1.4_riscv64.ddeb
 85f52e51d1909e57a1813ef8068b4fca5bd09ef9 252332 libnss3-dev_3.49.1-1ubuntu1.4_riscv64.deb
 4ea6394b4144bcff77a4c6f9958680342073d16d 6733572 libnss3-tools-dbgsym_3.49.1-1ubuntu1.4_riscv64.ddeb
 d149a94219ca7643f1c4df7c495f3a082f3e0996 892052 libnss3-tools_3.49.1-1ubuntu1.4_riscv64.deb
 352a950ed672eac12fd2f95e1b8e9ce564b5242c 1129588 libnss3_3.49.1-1ubuntu1.4_riscv64.deb
 8ef0bf517b0c81e004031c441195507dd4159cfd 6152 nss_3.49.1-1ubuntu1.4_riscv64.buildinfo
Checksums-Sha256:
 a6436262f46e63ba140a2161332dc502cc2a31ee469ca0890079d50bb0cea53c 4941308 libnss3-dbgsym_3.49.1-1ubuntu1.4_riscv64.ddeb
 925c04d10745306bdca18ff8df2acaad27c348b843d2ef0e1fca14c5e2e5ad9b 252332 libnss3-dev_3.49.1-1ubuntu1.4_riscv64.deb
 9248e877b2f4f8df38ed25cffb9526b318fac3c0a00f8558c83933f53c25be95 6733572 libnss3-tools-dbgsym_3.49.1-1ubuntu1.4_riscv64.ddeb
 d9fd0e1b7ef37e88b10e346a7dec324e4e5496a794fbb7c1b89c07fee1cb08c4 892052 libnss3-tools_3.49.1-1ubuntu1.4_riscv64.deb
 6c3d18432817de86b1dbe38a224f7f11547d30c6ad2edca6cf3782e28e357dd4 1129588 libnss3_3.49.1-1ubuntu1.4_riscv64.deb
 542eb7154867f8f19d61777769dd3aa99b5fee71bdea6362a1b5ce2e2bedb930 6152 nss_3.49.1-1ubuntu1.4_riscv64.buildinfo
Files:
 1d8915c370b059981f3c8fea9ddda96b 4941308 debug optional libnss3-dbgsym_3.49.1-1ubuntu1.4_riscv64.ddeb
 7292fef144788981f63ecb807724698f 252332 libdevel optional libnss3-dev_3.49.1-1ubuntu1.4_riscv64.deb
 5f8bd47fcf99b22d95dfeec47f89b0da 6733572 debug optional libnss3-tools-dbgsym_3.49.1-1ubuntu1.4_riscv64.ddeb
 c26ed8aa3fe74272433c22552bd421ae 892052 admin optional libnss3-tools_3.49.1-1ubuntu1.4_riscv64.deb
 353ccfd0a767a75861a918412fc3490d 1129588 libs optional libnss3_3.49.1-1ubuntu1.4_riscv64.deb
 564fdf44cf2fc932fb697b62ecdca120 6152 libs optional nss_3.49.1-1ubuntu1.4_riscv64.buildinfo
Original-Maintainer: Maintainers of Mozilla-related packages <team+pkg-mozilla@tracker.debian.org>