buildroot/package/libnss/libnss.hash, branch 2017.02.1

libnss: bump to version 3.27.2

2017-01-09T16:18:04+00:00

Fixes a memory leak in SSL_SetTrustAnchors(): https://bugzilla.mozilla.org/show_bug.cgi?id=1318561 Signed-off-by: Peter Korsgaard

libnss: bump to version 3.27.1

2016-10-13T06:04:33+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

nss: security bump to version 3.23

2016-03-31T01:43:58+00:00

Fixes: CVE-2016-1950 - Fixed a heap-based buffer overflow related to the parsing of certain ASN.1 structures. An attacker could create a specially-crafted certificate which, when parsed by NSS, would cause a crash or execution of arbitrary code with the permissions of the user. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libnss: security bump to version 3.22.2

2016-03-09T12:14:13+00:00

Fixes: CVE-2016-1950 - heap-based buffer overflow related to the parsing of certain ASN.1 structures. An attacker could create a specially-crafted certificate which, when parsed by NSS, would cause a crash or execution of arbitrary code with the permissions of the user. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libnss: bump to version 4.22.1

2016-02-24T21:14:44+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libnss: bump to version 3.21

2015-11-21T08:30:37+00:00

Disable gtests since they require C++ support. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libnss: bump to version 3.20

2015-10-03T13:14:32+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Tested-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

libnss: security bump to version 3.19.2

2015-07-18T09:33:29+00:00

Fixes: CVE-2015-2730, CVE-2015-2721, and probably others. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libnss: bump to version 3.17.4

2015-02-17T13:03:08+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libnss: security bump to version 3.17.3

2014-12-16T22:48:32+00:00

Fixes CVE-2014-1569 - The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long byte sequence for an encoding. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard