[Buildroot] [git commit branch/2021.08.x] package/libnss: security bump to version 3.68.1
From: Peter Korsgaard <peter@korsgaard.com>
Date: 2021-12-12 14:35:55
Subsystem:
the rest · Maintainer:
Linus Torvalds
commit: https://git.buildroot.net/buildroot/commit/?id=bad5728c98712babe3020404bb74aeec6feacc65 branch: https://git.buildroot.net/buildroot/commit/?id=refs/heads/2021.08.x Fixes the following security issue: - CVE-2021-43527: Heap overflow in NSS when verifying DSA/RSA-PSS DER-encoded signatures For more details, see the advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2021-51/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com> --- package/libnss/libnss.hash | 4 ++-- package/libnss/libnss.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/libnss/libnss.hash b/package/libnss/libnss.hash
index b8c58e3425..5417d8dc28 100644
--- a/package/libnss/libnss.hash
+++ b/package/libnss/libnss.hash@@ -1,4 +1,4 @@ -# From https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_RTM/src/SHA256SUMS -sha256 c402b32cac83034ec1c3d826ef4306cd14a066d7d9a6f4c30d82b3bc043c725b nss-3.68.tar.gz +# From https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/src/SHA256SUMS +sha256 d0b38f7c3f146211aacc5d55fb6383abcc11a4d7ca6a36be7cbceaaed2a9ea3b nss-3.68.1.tar.gz # Locally calculated sha256 a20c1a32d1f8102432360b42e932869f7c11c7cdbacf9cac554c422132af47f4 nss/COPYING
diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
index 0db543e34b..1a6f8bc412 100644
--- a/package/libnss/libnss.mk
+++ b/package/libnss/libnss.mk@@ -4,7 +4,7 @@ # ################################################################################ -LIBNSS_VERSION = 3.68 +LIBNSS_VERSION = 3.68.1 LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(subst .,_,$(LIBNSS_VERSION))_RTM/src LIBNSS_DISTDIR = dist
_______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot