diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2016-03-30 16:51:07 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2016-03-31 03:43:58 +0200 |
| commit | ab61031a34df8875cec0d9c605f7f69840c11cfe (patch) | |
| tree | 1655a56b89167ee18cbd79dd5e46205c582ae780 | |
| parent | 3025e84409f16407e50fd5f41e7cfd6c22066cee (diff) | |
| download | buildroot-ab61031a34df8875cec0d9c605f7f69840c11cfe.tar.gz buildroot-ab61031a34df8875cec0d9c605f7f69840c11cfe.zip | |
nss: security bump to version 3.23
Fixes:
CVE-2016-1950 - Fixed a heap-based buffer overflow related to the
parsing of certain ASN.1 structures. An attacker could create a
specially-crafted certificate which, when parsed by NSS, would cause a
crash or execution of arbitrary code with the permissions of the user.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
| -rw-r--r-- | package/libnss/libnss.hash | 4 | ||||
| -rw-r--r-- | package/libnss/libnss.mk | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/package/libnss/libnss.hash b/package/libnss/libnss.hash index 143e1d872a..8e03faf31c 100644 --- a/package/libnss/libnss.hash +++ b/package/libnss/libnss.hash @@ -1,2 +1,2 @@ -# From https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_22_2_RTM/src/SHA256SUMS -sha256 07d49287c527ac31200f02dcf8494cef19e936d8ed470802749c4dfc782d3650 nss-3.22.2.tar.gz +# From https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_23_RTM/src/SHA256SUMS +sha256 94b383e31c9671e9dfcca81084a8a813817e8f05a57f54533509b318d26e11cf nss-3.23.tar.gz diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk index 18dc62cb06..e2bbf1f39f 100644 --- a/package/libnss/libnss.mk +++ b/package/libnss/libnss.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBNSS_VERSION = 3.22.2 +LIBNSS_VERSION = 3.23 LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(subst .,_,$(LIBNSS_VERSION))_RTM/src LIBNSS_DISTDIR = dist |
