From 4db1acbc246e99a905a28924dce551233f238c45df041cdc611769eb4c628f4d Mon Sep 17 00:00:00 2001 From: Wolfgang Rosenauer Date: Tue, 8 Mar 2016 22:39:49 +0000 Subject: [PATCH] - update to NSS 3.21.1 (bmo#969894) * MFSA 2016-35/CVE-2016-1950 (bmo#1245528) Buffer overflow during ASN.1 decoding in NSS (fixed by requiring 3.21.1) * MFSA 2016-36/CVE-2016-1979 (bmo#1185033) Use-after-free during processing of DER encoded keys in NSS (fixed by requiring 3.21.1) OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=207 --- mozilla-nss.changes | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/mozilla-nss.changes b/mozilla-nss.changes index b41242b..92bc7ec 100644 --- a/mozilla-nss.changes +++ b/mozilla-nss.changes @@ -1,9 +1,14 @@ ------------------------------------------------------------------- Mon Mar 7 15:41:50 UTC 2016 - wr@rosenauer.org -- update to NSS 3.21.1 +- update to NSS 3.21.1 (bmo#969894) * required for Firefox 45.0 - * no upstream release notes available + * MFSA 2016-35/CVE-2016-1950 (bmo#1245528) + Buffer overflow during ASN.1 decoding in NSS + (fixed by requiring 3.21.1) + * MFSA 2016-36/CVE-2016-1979 (bmo#1185033) + Use-after-free during processing of DER encoded keys in NSS + (fixed by requiring 3.21.1) ------------------------------------------------------------------- Sun Dec 20 10:12:35 UTC 2015 - wr@rosenauer.org