[ubuntu/quantal] nss 3.13.1.with.ckbi.1.88-1ubuntu7 (Accepted)

Adam Conrad adconrad at 0c3.net
Mon Aug 20 23:56:17 UTC 2012


nss (3.13.1.with.ckbi.1.88-1ubuntu7) quantal-proposed; urgency=low

  * SECURITY UPDATE: denial of service in QuickDER decoder
    - debian/patches/CVE-2012-0441.patch: properly handle zero-length basic
      constraints and zero-length fields in
      nss/mozilla/security/nss/lib/softoken/legacydb/keydb.c,
      nss/mozilla/security/nss/lib/softoken/legacydb/lgcreate.c,
      nss/mozilla/security/nss/lib/softoken/legacydb/lowkey.c,
      nss/mozilla/security/nss/lib/softoken/legacydb/lowkeyti.h,
      nss/mozilla/security/nss/lib/util/quickder.c.
    - CVE-2012-0441

Date: 2012-08-16 17:35:15.383957+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/quantal/+source/nss/3.13.1.with.ckbi.1.88-1ubuntu7
-------------- next part --------------
Sorry, changesfile not available.


More information about the Quantal-changes mailing list