UbuntuUpdates.org

Package "libnss3"

Name: libnss3

Description:

Network Security Service libraries
Latest version: 2:3.35-2ubuntu2.16
Release: bionic (18.04)
Level: updates
Repository: main
Head package: nss
Homepage: http://www.mozilla.org/projects/security/pki/nss/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libnss3"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libnss3" in Bionic

Repository Area Version
base main 2:3.35-2ubuntu2
security main 2:3.35-2ubuntu2.16

Changelog

Version: 2:3.35-2ubuntu2.11 2020-08-10 19:07:12 UTC

  nss (2:3.35-2ubuntu2.11) bionic-security; urgency=medium

  * SECURITY UPDATE: Side-channel attack
    - debian/patches/CVE-2020-12400-and-6829-*.patch: use constant-time
      P-384 and P-521 in nss/lib/freebl/ecl/ecl-priv.h, nss/lib/freebl/ecl/ecl.c,
      nss/lib/freebl/ecl/ecl_spec384r1.c, nss/lib/freebl/freebl_base.gypi,
      nss/lib/freebl/manifest.mn, nss/test/ec/ectest.sh.
    - CVE-2020-12400
    - CVE-2020-6829
  * SECURITY UPDATE: Timing attack mitigation bypass
    - debian/patches/CVE-2020-12401.patch: remove unnecessary scalar
      padding in nss/lib/freebl/ec.c.
    - CVE-2020-12401

 -- <email address hidden> (Leonidas S. Barbosa) Wed, 05 Aug 2020 15:58:41 -0300
Source diff to previous version
CVE-2020-12400 P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function
CVE-2020-6829 Side channel attack on ECDSA signature generation
CVE-2020-12401 ECDSA timing attack mitigation bypass

Version: 2:3.35-2ubuntu2.9 2020-07-06 21:06:24 UTC

  nss (2:3.35-2ubuntu2.9) bionic-security; urgency=medium

  * SECURITY UPDATE: Side channel vulnerabilities during RSA key generation
    - debian/patches/CVE-2020-12402.patch: use constant-time GCD and
      modular inversion in nss/lib/freebl/mpi/mpi.c,
      nss/lib/freebl/mpi/mpi.h, nss/lib/freebl/mpi/mplogic.c.
    - CVE-2020-12402

 -- Marc Deslauriers <email address hidden> Mon, 22 Jun 2020 13:36:28 -0400
Source diff to previous version
CVE-2020-12402 Side channel vulnerabilities during RSA key generation

Version: 2:3.35-2ubuntu2.8 2020-06-16 18:06:47 UTC

  nss (2:3.35-2ubuntu2.8) bionic-security; urgency=medium

  * SECURITY UPDATE: invalid state after HelloRetryRequest
    - debian/patches/CVE-2019-17023-1.patch: prevent negotiation of
      versions lower than 1.3 after HelloRetryRequest in
      nss/lib/ssl/ssl3con.c, nss/lib/ssl/tls13con.c.
    - debian/patches/CVE-2019-17023-2.patch: add new tests for version
      limitations after a HRR in nss/gtests/ssl_gtest/ssl_hrr_unittest.cc.
    - CVE-2019-17023
  * SECURITY UPDATE: Timing attack during DSA key generation
    - debian/patches/CVE-2020-12399.patch: force a fixed length for DSA
      exponentiation in nss/lib/freebl/dsa.c.
    - CVE-2020-12399

 -- Marc Deslauriers <email address hidden> Wed, 10 Jun 2020 13:04:22 -0400
Source diff to previous version
CVE-2019-17023 After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS
CVE-2020-12399 Force a fixed length for DSA exponentiation

Version: 2:3.35-2ubuntu2.7 2020-01-08 19:07:08 UTC

  nss (2:3.35-2ubuntu2.7) bionic-security; urgency=medium

  * SECURITY UPDATE: Possible wrong length for cryptographic primitives input
    - debian/patches/CVE-2019-17006.patch: adds checks for length of crypto
      primitives in nss/lib/freebl/chacha20poly1305.c,
      nss/lib/freebl/ctr.c, nss/lib/freebl/gcm.c,
      nss/lib/freebl/intel-gcm-wrap.c,
      nss/lib/freebl/rsapkcs.c.
    - CVE-2019-17006

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 07 Jan 2020 14:55:38 -0300
Source diff to previous version
CVE-2019-17006 Check length of inputs for cryptographic primitives

Version: 2:3.35-2ubuntu2.6 2019-12-09 15:07:42 UTC

  nss (2:3.35-2ubuntu2.6) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2019-17007.patch: check got some certs in
      collect_certs r=jcj in nss/lib/pkcs7/certread.c,
      gtests/certdb_gtest/certdb_gtest.gyp,
      gtests/certdb_gtest/decode_certs_unittest.cc,
      gtests/certdb_gtest/manifest.mn.
    - CVE-2019-17007

 -- <email address hidden> (Leonidas S. Barbosa) Thu, 05 Dec 2019 13:37:32 -0300
CVE-2019-17007 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS


About   -   Send Feedback to @ubuntu_updates