Format: 1.8 Date: Mon, 09 May 2022 15:35:11 +0200 Source: nss Binary: libnss3 libnss3-dev libnss3-tools Architecture: arm64 Version: 2:3.49.1-1ubuntu1.7 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: David Fernandez Gonzalez Description: libnss3 - Network Security Service libraries libnss3-dev - Development files for the Network Security Service libraries libnss3-tools - Network Security Service tools Changes: nss (2:3.49.1-1ubuntu1.7) focal-security; urgency=medium . * SECURITY UPDATE: Denial of service through ChangeCipherSpec - debian/patches/CVE-2020-25648-1.patch: reject CCS when compatibility is not specify or if many CCS in a row in nss/gtests/ssl_gtest/ssl_tls13compat_unittest.cc, nss/lib/ssl/ssl3con.c and nss/lib/ssl/sslimpl.h. - debian/patches/CVE-2020-25648-2.patch: reject multiple CCS packages but allow the first one in nss/gtests/ssl_gtest/ssl_tls13compat_unittest.cc, nss/lib/ssl/ssl3con.c and nss/lib/ssl/sslimpl.h. - CVE-2020-25648 Checksums-Sha1: b699cba1cfb826a43b783892e6b28103451f8d37 5195976 libnss3-dbgsym_3.49.1-1ubuntu1.7_arm64.ddeb d68bfa511d9600b6cf3f556cb6880b233144b3e5 229900 libnss3-dev_3.49.1-1ubuntu1.7_arm64.deb 5337ddcb929cca037288d9a146919ae2e63d0400 7044864 libnss3-tools-dbgsym_3.49.1-1ubuntu1.7_arm64.ddeb b9f44974474d7e5f7b36f010ddbe96ce19a6a84a 938076 libnss3-tools_3.49.1-1ubuntu1.7_arm64.deb b8ec308f8218badc404243fedea55e2fe5e34819 1179436 libnss3_3.49.1-1ubuntu1.7_arm64.deb 2550b7a34c1354713b35ae0fc6fde0d3b54fa051 6533 nss_3.49.1-1ubuntu1.7_arm64.buildinfo Checksums-Sha256: 78eb87a73195bf166ac957e46aff7cc97153567a48a9761f7e91443dd4d7ba1b 5195976 libnss3-dbgsym_3.49.1-1ubuntu1.7_arm64.ddeb 2ff21ccaffab401e3ab66e379993f543b3ce16b90e9a54ede9a6ac950fac6418 229900 libnss3-dev_3.49.1-1ubuntu1.7_arm64.deb ed15c853a047c3868c4dbe9ef7cc12c8caa03c4cd0f9a8187e2a0d8fc95ab6d4 7044864 libnss3-tools-dbgsym_3.49.1-1ubuntu1.7_arm64.ddeb 62d2644e36cfe2ad21c029f6a9dd912ff5c45fbc9587107dfed8765542ba65a2 938076 libnss3-tools_3.49.1-1ubuntu1.7_arm64.deb c5332570719a092a796da797d8f9682fab41ed739fdf52441c4f8cbd4380d2c6 1179436 libnss3_3.49.1-1ubuntu1.7_arm64.deb d4957b98f1cca8442bff8a024221f9b35f0f7b52bb2390dd5f92b6b4b8f97b0e 6533 nss_3.49.1-1ubuntu1.7_arm64.buildinfo Files: 6dca41fcd53a35533a564029acf27620 5195976 debug optional libnss3-dbgsym_3.49.1-1ubuntu1.7_arm64.ddeb a612dcddd2886a4299f38ab721778a9d 229900 libdevel optional libnss3-dev_3.49.1-1ubuntu1.7_arm64.deb b67d90885977b54244ededc4d8d25e62 7044864 debug optional libnss3-tools-dbgsym_3.49.1-1ubuntu1.7_arm64.ddeb f8b119bcb4f8bfebb797907b91dbee11 938076 admin optional libnss3-tools_3.49.1-1ubuntu1.7_arm64.deb 76e99679000cd6aef6defb76d5a9267f 1179436 libs optional libnss3_3.49.1-1ubuntu1.7_arm64.deb f29fe24bd008a24ce2808cb738872afb 6533 libs optional nss_3.49.1-1ubuntu1.7_arm64.buildinfo Original-Maintainer: Maintainers of Mozilla-related packages