summaryrefslogtreecommitdiffstats
path: root/package/libnss/libnss.mk
diff options
context:
space:
mode:
authorPeter Korsgaard <peter@korsgaard.com>2018-11-13 00:02:41 +0100
committerPeter Korsgaard <peter@korsgaard.com>2018-11-13 09:16:28 +0100
commit1c32e4c298d02ce7ca3c3551be8c31051dde7801 (patch)
tree8fba03916f761ff9daa1ede35463bff6205af54d /package/libnss/libnss.mk
parent56825a6518e46af5e0845760e20652426d6fe3b2 (diff)
downloadbuildroot-1c32e4c298d02ce7ca3c3551be8c31051dde7801.tar.gz
buildroot-1c32e4c298d02ce7ca3c3551be8c31051dde7801.zip
libnss: security bump to version 3.39
Fixes the following security issue: CVE-2018-12384: NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/libnss/libnss.mk')
-rw-r--r--package/libnss/libnss.mk2
1 files changed, 1 insertions, 1 deletions
diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
index 0693f71ee6..73c9b08fd2 100644
--- a/package/libnss/libnss.mk
+++ b/package/libnss/libnss.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBNSS_VERSION = 3.38
+LIBNSS_VERSION = 3.39
LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(subst .,_,$(LIBNSS_VERSION))_RTM/src
LIBNSS_DISTDIR = dist
OpenPOWER on IntegriCloud