-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Nov 2019 17:14:07 -0500 Source: nss Binary: libnss3 libnss3-1d libnss3-tools libnss3-dev libnss3-dbg Architecture: source amd64 Version: 2:3.26-1+debu8u7 Distribution: jessie-security Urgency: high Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org> Changed-By: Roberto C. Sanchez <roberto@debian.org> Description: libnss3 - Network Security Service libraries libnss3-1d - Network Security Service libraries - transitional package libnss3-dbg - Debugging symbols for the Network Security Service libraries libnss3-dev - Development files for the Network Security Service libraries libnss3-tools - Network Security Service tools Changes: nss (2:3.26-1+debu8u7) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-11745: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate Checksums-Sha1: 6a1f7957bd0f2156e845dc8107f711fbafe06c7a 2252 nss_3.26-1+debu8u7.dsc 3056f09490fb8652635ba72de8a767ca7600a5c8 41340 nss_3.26-1+debu8u7.debian.tar.xz e18cd353e5307b79c96bb8875ffd666d9e2c751a 1171278 libnss3_3.26-1+debu8u7_amd64.deb 9147e48b1e5bfa37488fecab942ba8bc2d42a81e 18990 libnss3-1d_3.26-1+debu8u7_amd64.deb 9fcf69f047dfc9f5fe070dee87b3ad0609cadaeb 785392 libnss3-tools_3.26-1+debu8u7_amd64.deb ff948bce7bf8c3a45b7a961209a6104bd1505209 241782 libnss3-dev_3.26-1+debu8u7_amd64.deb 0756a227771ac10a67613b6d550507b3dc6ea972 8197002 libnss3-dbg_3.26-1+debu8u7_amd64.deb Checksums-Sha256: 84d52098a3bc2ba914ffd04e11933846f6b0b7186562789af77afd17c28fac41 2252 nss_3.26-1+debu8u7.dsc f3e08bcb30e726b22dfba5e73f07bf722e795591e9f0c2a5523624a80f379f3f 41340 nss_3.26-1+debu8u7.debian.tar.xz e5d5d0763288899a30045e7587d67149bfc9d590a146d127b2483465f416975f 1171278 libnss3_3.26-1+debu8u7_amd64.deb 5181b71b91ed8229620288c34c4d36bdafa590986a3f55b6705a06a7b4e0efcb 18990 libnss3-1d_3.26-1+debu8u7_amd64.deb 5b7635f168d2cbada3872668b32fe054b052a50ebc1dbb88b38d1c3b5bfb01dd 785392 libnss3-tools_3.26-1+debu8u7_amd64.deb 865bd181d9181edc22fbd6c305f27616d91a3eb9d9e4f16f7244ee61df4f1c44 241782 libnss3-dev_3.26-1+debu8u7_amd64.deb 40533d39254b161082f243f738426cfd37e13e9eb78d5fc0715930047f98296d 8197002 libnss3-dbg_3.26-1+debu8u7_amd64.deb Files: e3beb4f244cfb1540e72250bfa74545c 2252 libs optional nss_3.26-1+debu8u7.dsc 82103cc3260f5c5ba504c6f16c492fbf 41340 libs optional nss_3.26-1+debu8u7.debian.tar.xz bf5fee3026e337329884d8f6f890260e 1171278 libs optional libnss3_3.26-1+debu8u7_amd64.deb 033cf185bb244b95c5806dc21bcaf2be 18990 oldlibs extra libnss3-1d_3.26-1+debu8u7_amd64.deb 7efd59c0662c4cc4338cd8979018097d 785392 admin optional libnss3-tools_3.26-1+debu8u7_amd64.deb 911efc3c2ec969b1966362615b77dc68 241782 libdevel optional libnss3-dev_3.26-1+debu8u7_amd64.deb 20068cce62e4d36ca5292d83ca792ac3 8197002 debug extra libnss3-dbg_3.26-1+debu8u7_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIYZ1DR4ae5UL01q7ldFmTdL1kUIFAl3cV8oACgkQldFmTdL1 kUKy9A//fmNudW+g2MyqnrM99Bz1lgEP25m2gjgKCWevroVKRLw260hPHEh7n/HE ZtdeJv30IgZABGeP+cfmX4YHrvUd5f2OjWEPJeTkDhA4FZsoMoAyZVvyrw/JelOs XeDAnK6hH6qSjJfKc6jTvz34JZfRmdy9TrnplEF5ZkTTCa6cfngGMKALzsOvoHo3 RNLxLKV9YYY7YOXuNn2QGdmRiKHtpD8vzJ9jWv3IzwKKscBSSAAej96vcaZrLbFc HeUF2JIjHM80rMxIX/QjP0hy4LsgkWaT3tmvX+OGLiVKZ/FiaXg68574/zb/mXjd huRxb/hIAwuYuRBE6fTP6TpLBWtzpQR1hwgD5MngbqEHEKfHYxz2nhUDoXTh4qK5 S53s8PQnovTe3wAom/SRA++UOBB5m0xmZdyQuwplxCE76HJAnteWV14L7tf0q0oP Vs1Y+74Wc1sCCnKGS1FRdXLS4Knd08EMU8jhfLMr4+BYiI8o3xbCYDolT67Ncq0L oy187cchcfVP6sMP7YNv2TcnX7D/+GqxjMMaycvt9bZfbKiE9+CfELHBCe3VMnZp SC2vYKGBasXL4veh5Tdg/yDifD5Q6BDMqiZUnocGPR6zwTKj3mzS0QUooABO3I0x QK7ICVIQXXArBcsDkJHRpsv6oEh9IDJXqp4DwhBcs+ckHQOo41o= =+aEi -----END PGP SIGNATURE-----