-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 29 Jul 2014 10:20:05 +0200 Source: nss Binary: libnss3-1d libnss3-tools libnss3-dev libnss3-1d-dbg Architecture: source amd64 Version: 3.12.8-1+squeeze8 Distribution: squeeze-lts Urgency: high Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org> Changed-By: Raphael Geissert <geissert@debian.org> Description: libnss3-1d - Network Security Service libraries libnss3-1d-dbg - Debugging symbols for the Network Security Service libraries libnss3-dev - Development files for the Network Security Service libraries libnss3-tools - Network Security Service tools Changes: nss (3.12.8-1+squeeze8) squeeze-lts; urgency=high . * Non-maintainer upload by the Security Team. * Fix CVE-2014-1492: Incorrect IDNA domain name matching for wildcard certificates. * Fix CVE-2014-1491: Do not allow p-1 as a public DH value. * Fix CVE-2013-5606: Properly return a certificate validation error when using the verifylog mode. * Fix CVE-2013-1741: Runaway memset in certificate parsing on 64-bit computers leading to a crash by attempting to write 4Gb of nulls. Checksums-Sha1: 894e3e03ac735dcea9be5db7778265a2b66e0aad 1390 nss_3.12.8-1+squeeze8.dsc 319d6539cc8607cd4ee1f591fe92882d73d0bcd2 116698 nss_3.12.8-1+squeeze8.debian.tar.gz 5ada4b7eda310063271ddaa64ec56fb2c8d651b3 1120058 libnss3-1d_3.12.8-1+squeeze8_amd64.deb 272efb73fad0b61ee643ec93cd4bc24aebb752ae 449566 libnss3-tools_3.12.8-1+squeeze8_amd64.deb e9ec94caa40c95c79126304fbd9c89f0ffdea921 268570 libnss3-dev_3.12.8-1+squeeze8_amd64.deb 0ff32c3c32b31b4a97b970147dc9475911882523 3270988 libnss3-1d-dbg_3.12.8-1+squeeze8_amd64.deb Checksums-Sha256: 3e253836b1b42de7381092547c492fb214cfaf621a4fac72098425e937220f3c 1390 nss_3.12.8-1+squeeze8.dsc 271d447c7fe59dfa44d1df63a89afc098e61f31c698bbb9bcaecbb4626d61647 116698 nss_3.12.8-1+squeeze8.debian.tar.gz 3fdc33fa061d7fbbdc20b81c4b2509294c478c4ac2c08241eac36e6e7dcb5926 1120058 libnss3-1d_3.12.8-1+squeeze8_amd64.deb c86c2602aeef40e1b88156290ea654dc591b6830b1f2f01f5e49020c4b4e0e45 449566 libnss3-tools_3.12.8-1+squeeze8_amd64.deb cdb661cba3ecd0277de7975b39559839324663d00354f0a26480ffd52a8e3bd1 268570 libnss3-dev_3.12.8-1+squeeze8_amd64.deb 774f4a120827f17848228ff15d90ae75005ce8e25c403459e937fcc490f7c930 3270988 libnss3-1d-dbg_3.12.8-1+squeeze8_amd64.deb Files: 70b2f29691440d79288630746001a923 1390 libs optional nss_3.12.8-1+squeeze8.dsc 7406dba6c3db25ae11331cefb4f621b1 116698 libs optional nss_3.12.8-1+squeeze8.debian.tar.gz 6ddce9fdbd3e83322c0354bc2bce0255 1120058 libs optional libnss3-1d_3.12.8-1+squeeze8_amd64.deb b54109c4e708a266e6f3c55fd258e023 449566 admin optional libnss3-tools_3.12.8-1+squeeze8_amd64.deb 80f9bd183c085d5044cce1aa2643186b 268570 libdevel optional libnss3-dev_3.12.8-1+squeeze8_amd64.deb d47b54bc6ffe96f302c768b6f3232b99 3270988 debug extra libnss3-1d-dbg_3.12.8-1+squeeze8_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlPaHeUACgkQYy49rUbZzlpg8gCfUMOaqsOPCIVVP09GFHBckDok WvwAn3y3iHCcpT0a9XU0gGD0n5ONTUKk =6aF1 -----END PGP SIGNATURE-----