-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Oct 2017 17:32:51 +0200 Source: nss Binary: libnss3 libnss3-tools libnss3-dev libnss3-dbg Architecture: source Version: 2:3.26.2-1.1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Maintainers of Mozilla-related packages <pkg-mozilla-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libnss3 - Network Security Service libraries libnss3-dbg - Debugging symbols for the Network Security Service libraries libnss3-dev - Development files for the Network Security Service libraries libnss3-tools - Network Security Service tools Changes: nss (2:3.26.2-1.1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2017-7805: Potential use-after-free in TLS 1.2 server when verifying client authentication Checksums-Sha1: 232f977e864d0f076fafc52a61fd39cf5b42d20a 2428 nss_3.26.2-1.1+deb9u1.dsc 40c178e9aa416b76c169a1f425d4852d56fa1232 7388390 nss_3.26.2.orig.tar.gz 1c0faa2268f2da428521a26dc9d22ad8051ac067 30820 nss_3.26.2-1.1+deb9u1.debian.tar.xz Checksums-Sha256: 4b77f525bb3d67ddec4bf5f108d8fc7873191de997e0c0aec07c494425b089de 2428 nss_3.26.2-1.1+deb9u1.dsc 13a40a2f97edf5fab3d4c7fdd928e77df36dc539cd8354b6b5d79ab93a131a5a 7388390 nss_3.26.2.orig.tar.gz f87d64233afcbb25bf9253064a1508c3adf49f01ed6068d4968231d09ff0d87c 30820 nss_3.26.2-1.1+deb9u1.debian.tar.xz Files: eeef3e74127996961507fbd7f92f4e7e 2428 libs optional nss_3.26.2-1.1+deb9u1.dsc 643b46c81a1235a81459d853a084e401 7388390 libs optional nss_3.26.2.orig.tar.gz 5af0c85173f0931b81636f809b7748c9 30820 libs optional nss_3.26.2-1.1+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlndnK9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Eyu4P/R46R3watvo6IzkTitmq0JIRU+oEz/z9 axIB0lcjnJ8u+TmH7Sq00i/VLECkz2+9dtkWvhyqWoVKvIEFDLyOIqKZ0GFuV4b0 A1MRcumfTgFkVB7wv1bdbD1qYQatHgrrK8PxyKufBJBwP1KdwstQM0XL0yCXHs7G D5hlqBehKq5T6Vff+Qq3wfNGD/M2eUV4fV0gvOQX3FTVsmemplZrEwsmavux+/Xo 1/Gm8gnq2T+uxDHqkThQ7+1pvtC9vp9vXsvibtvXyzAlFb4i1fdjUneoXzD5fL4O lpXxy2pNLWZGSQkaeA/BFmptprZYZOcYnWIM837gKqmfYS3q6mvoDYxjNDpXl5LU EvFI/LkbGBmz1XqFmq8SxLeZDRrg8Vd2m4Z3+5G+/ofBPKIzkikcRrz+/m53zzcd FFNjRALev312BXR2ck4OaDPFpRL4Al5Tu6P0tcameAyQBDvtWDw28Q9kCfloh0cX D2pfbdulOyJTL13uFzUAw9mJs7jyl5Z3Mge3AqIGWAkJd3y+T1qVQyPvkruW8GO6 nkoUQ2jblpt7OdWvAgpuDDTSYabwQ5lac2oDInkydESVqdRY6RIjxxwk172N3clh ZQXYFVfoZCVjmb7eaC6q4Gapy6L3Xp0WjqvmqFwqk4F1RP3pwYoMITgC5pt7qs6T 62JyuJHOixWk =tWke -----END PGP SIGNATURE-----