Accepted nss 2:3.26-1+debu8u4 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 04 Mar 2019 09:46:23 -0500
Source: nss
Binary: libnss3 libnss3-1d libnss3-tools libnss3-dev libnss3-dbg
Architecture: source amd64
Version: 2:3.26-1+debu8u4
Distribution: jessie-security
Urgency: high
Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org>
Changed-By: Roberto C. Sanchez <roberto@debian.org>
Description:
libnss3 - Network Security Service libraries
libnss3-1d - Network Security Service libraries - transitional package
libnss3-dbg - Debugging symbols for the Network Security Service libraries
libnss3-dev - Development files for the Network Security Service libraries
libnss3-tools - Network Security Service tools
Closes: 921614
Changes:
nss (2:3.26-1+debu8u4) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* Update nss/tests/libpkix/certs/PayPalEE.cert to work-around the fact that
the former certificate has expired. The new certificate expiry is
2020-08-18. Also update the expected OID through (adds
debian/patches/replace_expired_paypal_cert.patch).
* Add patches to fix two security issues:
- CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack
- CVE-2018-18508: NULL pointer dereference in several CMS functions
resulting in a denial of service (Closes: #921614)
Checksums-Sha1:
04a35fbbeba2da3cc19e2e5787b053e7bbd816a0 2252 nss_3.26-1+debu8u4.dsc
a2908b09692480b25927615ea567070dd040e9b5 36516 nss_3.26-1+debu8u4.debian.tar.xz
38a821654b8d662c0a787dbe2b39fcdd5f704178 1160636 libnss3_3.26-1+debu8u4_amd64.deb
259eb66326c01a35dc4bc56451c4676f5ca33d3a 18606 libnss3-1d_3.26-1+debu8u4_amd64.deb
9e4c23f0bf21458d1fd13a530174b03b7d1b6ce5 784658 libnss3-tools_3.26-1+debu8u4_amd64.deb
67ba8c68d3d40d34983158b8ceb2f35efe13d884 233490 libnss3-dev_3.26-1+debu8u4_amd64.deb
aeb67012202beac7d5e3e9eb23f5f68e8ca3ea51 8198252 libnss3-dbg_3.26-1+debu8u4_amd64.deb
Checksums-Sha256:
8219df0d9c4eeda2086cedbbd09dc391bd0f427afe4ef1a2cc8b7895dffc6c7b 2252 nss_3.26-1+debu8u4.dsc
38df123c4be5903700abcbd34e3f290dc343e0821a2049a86346b359da783667 36516 nss_3.26-1+debu8u4.debian.tar.xz
13b834f9fc105ac011d15aaa4d8f8415fee85d78d1f56b17069bd449d98b5a94 1160636 libnss3_3.26-1+debu8u4_amd64.deb
a3d38175122ac27070d3d0816ffd99bbb21fd7b2a394e01097910b866f06052f 18606 libnss3-1d_3.26-1+debu8u4_amd64.deb
e6c4eccf1cf0c0387f937706b398f0b18d69140bbd0791e88775e44c07d7990e 784658 libnss3-tools_3.26-1+debu8u4_amd64.deb
f5394992c92a753770becc1ba14427734ff0f9daf9083362280cb2da014acefb 233490 libnss3-dev_3.26-1+debu8u4_amd64.deb
b41efc1ca3039120a53d8ee14e566d6ffe1492db8ed01618f386f50495c7f412 8198252 libnss3-dbg_3.26-1+debu8u4_amd64.deb
Files:
580f2e8cfbbf628600ee822c2291983d 2252 libs optional nss_3.26-1+debu8u4.dsc
9fe34325c29f3b2bb8a5652251f200be 36516 libs optional nss_3.26-1+debu8u4.debian.tar.xz
7ef73741ba6c814d2ead6abd10f3a835 1160636 libs optional libnss3_3.26-1+debu8u4_amd64.deb
728d2f1278ec36768ede1a6dc3258322 18606 oldlibs extra libnss3-1d_3.26-1+debu8u4_amd64.deb
938e552db331cdeb25d237e74c5b2d2c 784658 admin optional libnss3-tools_3.26-1+debu8u4_amd64.deb
bdb0fbc2dbaae49dcbc52b9595fe6e07 233490 libdevel optional libnss3-dev_3.26-1+debu8u4_amd64.deb
e2d37088fe00d0d50f056c7cc724c8c5 8198252 debug extra libnss3-dbg_3.26-1+debu8u4_amd64.deb
-----BEGIN PGP SIGNATURE-----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=ff1n
-----END PGP SIGNATURE-----