[ubuntu/resolute-proposed] nss 2:3.120-1ubuntu1 (Accepted)

[Marc Deslauriers]

nss (2:3.120-1ubuntu1) resolute; urgency=medium

  * SECURITY UPDATE: integer overflow in platform-independent ghash
    - debian/patches/CVE-2026-2781.patch: properly cast len in
      nss/lib/freebl/gcm.c.
    - CVE-2026-2781

Date: Thu, 26 Feb 2026 12:49:32 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/nss/2:3.120-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 26 Feb 2026 12:49:32 -0500
Source: nss
Built-For-Profiles: noudeb
Architecture: source
Version: 2:3.120-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 nss (2:3.120-1ubuntu1) resolute; urgency=medium
 .
   * SECURITY UPDATE: integer overflow in platform-independent ghash
     - debian/patches/CVE-2026-2781.patch: properly cast len in
       nss/lib/freebl/gcm.c.
     - CVE-2026-2781
Checksums-Sha1:
 1a2e155f34e3aedca0136819507e2b261b4e33c3 2270 nss_3.120-1ubuntu1.dsc
 9deebc99249408e9d82849de0d44952d3e1effc5 20276 nss_3.120-1ubuntu1.debian.tar.xz
 1ada66ef32c5a29e2281e32034a7c7d836cf3f64 6389 nss_3.120-1ubuntu1_source.buildinfo
Checksums-Sha256:
 e84d6c6a0d9506c24ade8e21a3865aa346d65a488324947037cf2e02b82c50a0 2270 nss_3.120-1ubuntu1.dsc
 5540629019598e8920b18370a93be43f88cbe847c4a2b4bbf2f7350c7fb74a50 20276 nss_3.120-1ubuntu1.debian.tar.xz
 6a5ffa1e836c47e3b77e3acea5fd1a48607bb5a7d16239aef7c4ee99a056ee4a 6389 nss_3.120-1ubuntu1_source.buildinfo
Files:
 03260d810488a817a5ae901d5e08e617 2270 libs optional nss_3.120-1ubuntu1.dsc
 f0dc1331c588ae0f5c8a522a30b05275 20276 libs optional nss_3.120-1ubuntu1.debian.tar.xz
 b04d7c1fb8ba0956414137996a1eb0ce 6389 libs optional nss_3.120-1ubuntu1_source.buildinfo
Original-Maintainer: Maintainers of Mozilla-related packages <team+pkg-mozilla at tracker.debian.org>