UbuntuUpdates.org

Package "libnss3"

Name: libnss3

Description:

Network Security Service libraries

Latest version: 2:3.68-1ubuntu1.1
Release: impish (21.10)
Level: updates
Repository: main
Head package: nss
Homepage: http://www.mozilla.org/projects/security/pki/nss/

Links


Download "libnss3"


Other versions of "libnss3" in Impish

Repository Area Version
base main 2:3.68-1ubuntu1
security main 2:3.68-1ubuntu1.1

Changelog

Version: 2:3.68-1ubuntu1.1 2021-12-01 20:07:13 UTC

  nss (2:3.68-1ubuntu1.1) impish-security; urgency=medium

  * SECURITY UPDATE: heap overflow when verifying DSA/RSA-PSS DER-encoded
    signatures
    - debian/patches/CVE-2021-43527.patch: check signature lengths in
      nss/lib/cryptohi/secvfy.c.
    - CVE-2021-43527

 -- Marc Deslauriers <email address hidden> Mon, 29 Nov 2021 07:12:54 -0500

CVE-2021-43527 Heap overflow in NSS when verifying DSA/RSA-PSS DER-encoded signatures



About   -   Send Feedback to @ubuntu_updates