-
nss (2:3.35-2ubuntu2.16) bionic-security; urgency=medium
* SECURITY UPDATE: Arbitrary memory write via PKCS 12 in NSS
- debian/patches/CVE-2023-0767.patch: improve handling of unknown
PKCS#12 safe bag types in nss/lib/pkcs12/p12d.c,
nss/lib/pkcs12/p12t.h, nss/lib/pkcs12/p12tmpl.c.
- CVE-2023-0767
-- Marc Deslauriers <email address hidden> Fri, 17 Feb 2023 09:51:17 -0500
-
nss (2:3.35-2ubuntu2.15) bionic-security; urgency=medium
* SECURITY UPDATE: Crash when handling empty pkcs7 sequence
- debian/patches/CVE-2022-22747.patch: check for missing signedData
field in nss/gtests/certdb_gtest/decode_certs_unittest.cc,
nss/lib/pkcs7/certread.c.
- CVE-2022-22747
* SECURITY UPDATE: Free of uninitialized pointer in lg_init
- debian/patches/CVE-2022-34480.patch: rearrange frees in
nss/lib/softoken/legacydb/lginit.c.
- CVE-2022-34480
-- Marc Deslauriers <email address hidden> Wed, 06 Jul 2022 07:25:51 -0400
-
nss (2:3.35-2ubuntu2.14) bionic-security; urgency=medium
* SECURITY UPDATE: Denial of service through ChangeCipherSpec
- debian/patches/CVE-2020-25648-1.patch: reject CCS when
compatibility is not specify or if many CCS in a row in
nss/lib/ssl/ssl3con.c and nss/lib/ssl/sslimpl.h.
- debian/patches/CVE-2020-25648-2.patch: reject multiple CCS
packages but allow the first one in
nss/lib/ssl/ssl3con.c and nss/lib/ssl/sslimpl.h.
- CVE-2020-25648
-- David Fernandez Gonzalez <email address hidden> Tue, 10 May 2022 13:49:35 +0200
-
nss (2:3.35-2ubuntu2.13) bionic-security; urgency=medium
* SECURITY UPDATE: heap overflow when verifying DSA/RSA-PSS DER-encoded
signatures
- debian/patches/CVE-2021-43527.patch: check signature lengths in
nss/lib/cryptohi/secvfy.c.
- CVE-2021-43527
-- Marc Deslauriers <email address hidden> Mon, 29 Nov 2021 07:16:53 -0500
-
nss (2:3.35-2ubuntu2.12) bionic-security; urgency=medium
* SECURITY UPDATE: Out-of-bounds read
- debian/patches/CVE-2020-12403-2.patch: fix incorrect call to ChaChaPoly1305 by PKCS11
in nss/lib/freebl/chacha20poly1305.c.
- CVE-2020-12403
-- <email address hidden> (Leonidas S. Barbosa) Fri, 21 Aug 2020 13:32:01 -0300
-
nss (2:3.35-2ubuntu2.11) bionic-security; urgency=medium
* SECURITY UPDATE: Side-channel attack
- debian/patches/CVE-2020-12400-and-6829-*.patch: use constant-time
P-384 and P-521 in nss/lib/freebl/ecl/ecl-priv.h, nss/lib/freebl/ecl/ecl.c,
nss/lib/freebl/ecl/ecl_spec384r1.c, nss/lib/freebl/freebl_base.gypi,
nss/lib/freebl/manifest.mn, nss/test/ec/ectest.sh.
- CVE-2020-12400
- CVE-2020-6829
* SECURITY UPDATE: Timing attack mitigation bypass
- debian/patches/CVE-2020-12401.patch: remove unnecessary scalar
padding in nss/lib/freebl/ec.c.
- CVE-2020-12401
-- <email address hidden> (Leonidas S. Barbosa) Wed, 05 Aug 2020 15:58:41 -0300
-
nss (2:3.35-2ubuntu2.10) bionic; urgency=medium
* Symlink chk files to fix self-verification in FIPS mode (LP: #1885562)
-- Dariusz Gadomski <email address hidden> Tue, 21 Jul 2020 09:37:37 +0200
-
nss (2:3.35-2ubuntu2.9) bionic-security; urgency=medium
* SECURITY UPDATE: Side channel vulnerabilities during RSA key generation
- debian/patches/CVE-2020-12402.patch: use constant-time GCD and
modular inversion in nss/lib/freebl/mpi/mpi.c,
nss/lib/freebl/mpi/mpi.h, nss/lib/freebl/mpi/mplogic.c.
- CVE-2020-12402
-- Marc Deslauriers <email address hidden> Mon, 22 Jun 2020 13:36:28 -0400
-
nss (2:3.35-2ubuntu2.8) bionic-security; urgency=medium
* SECURITY UPDATE: invalid state after HelloRetryRequest
- debian/patches/CVE-2019-17023-1.patch: prevent negotiation of
versions lower than 1.3 after HelloRetryRequest in
nss/lib/ssl/ssl3con.c, nss/lib/ssl/tls13con.c.
- debian/patches/CVE-2019-17023-2.patch: add new tests for version
limitations after a HRR in nss/gtests/ssl_gtest/ssl_hrr_unittest.cc.
- CVE-2019-17023
* SECURITY UPDATE: Timing attack during DSA key generation
- debian/patches/CVE-2020-12399.patch: force a fixed length for DSA
exponentiation in nss/lib/freebl/dsa.c.
- CVE-2020-12399
-- Marc Deslauriers <email address hidden> Wed, 10 Jun 2020 13:04:22 -0400
-
nss (2:3.35-2ubuntu2.7) bionic-security; urgency=medium
* SECURITY UPDATE: Possible wrong length for cryptographic primitives input
- debian/patches/CVE-2019-17006.patch: adds checks for length of crypto
primitives in nss/lib/freebl/chacha20poly1305.c,
nss/lib/freebl/ctr.c, nss/lib/freebl/gcm.c,
nss/lib/freebl/intel-gcm-wrap.c,
nss/lib/freebl/rsapkcs.c.
- CVE-2019-17006
-- <email address hidden> (Leonidas S. Barbosa) Tue, 07 Jan 2020 14:55:38 -0300
-
nss (2:3.35-2ubuntu2.6) bionic-security; urgency=medium
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2019-17007.patch: check got some certs in
collect_certs r=jcj in nss/lib/pkcs7/certread.c,
gtests/certdb_gtest/certdb_gtest.gyp,
gtests/certdb_gtest/decode_certs_unittest.cc,
gtests/certdb_gtest/manifest.mn.
- CVE-2019-17007
-- <email address hidden> (Leonidas S. Barbosa) Thu, 05 Dec 2019 13:37:32 -0300
-
nss (2:3.35-2ubuntu2.5) bionic-security; urgency=medium
* SECURITY UPDATE: out-of-bounds write in NSC_EncryptUpdate
- debian/patches/CVE-2019-11745.patch: use maxout not block size in
nss/lib/softoken/pkcs11c.c.
- CVE-2019-11745
* Note: this does _not_ contain the changes from 2:3.35-2ubuntu2.4 in
disco-proposed.
-- Marc Deslauriers <email address hidden> Tue, 26 Nov 2019 08:53:05 -0500
-
nss (2:3.35-2ubuntu2.4) bionic; urgency=medium
* disable reading fips_enabled flag and enabling FIPS mode
automatically on a FIPS machine. libnss is not a FIPS
certified library. (LP: #1837734)
-- Vineetha Kamath <email address hidden> Tue, 23 Jul 2019 17:09:07 +0000
-
nss (2:3.35-2ubuntu2.3) bionic-security; urgency=medium
* SECURITY UPDATE: OOB read when importing a curve25519 private key
- debian/patches/CVE-2019-11719.patch: don't unnecessarily strip
leading 0's from key material during PKCS11 import in
nss/lib/freebl/ecl/ecp_25519.c, nss/lib/pk11wrap/pk11akey.c,
nss/lib/pk11wrap/pk11cert.c, nss/lib/pk11wrap/pk11pk12.c,
nss/lib/softoken/legacydb/lgattr.c, nss/lib/softoken/pkcs11c.c.
- CVE-2019-11719
* SECURITY UPDATE: segfault via empty or malformed p256-ECDH public keys
- debian/patches/CVE-2019-11729-1.patch: more thorough input checking
in nss/lib/cryptohi/seckey.c, nss/lib/freebl/dh.c,
nss/lib/freebl/ec.c, nss/lib/util/quickder.c.
- debian/patches/CVE-2019-11729-2.patch: ignore spki decode failures on
negative tests in nss/gtests/pk11_gtest/pk11_curve25519_unittest.cc.
- CVE-2019-11729
-- Marc Deslauriers <email address hidden> Fri, 12 Jul 2019 08:16:27 -0400
-
nss (2:3.35-2ubuntu2.2) bionic-security; urgency=medium
* SECURITY UPDATE: DoS in NULL pointer dereference in CMS functions
- debian/patches/CVE-2018-18508-1.patch: add null checks in
nss/lib/smime/cmscinfo.c, nss/lib/smime/cmsdigdata.c,
nss/lib/smime/cmsencdata.c, nss/lib/smime/cmsenvdata.c,
nss/lib/smime/cmsmessage.c, nss/lib/smime/cmsudf.c.
- debian/patches/CVE-2018-18508-2.patch: add null checks in
nss/lib/smime/cmsmessage.c.
- CVE-2018-18508
-- Marc Deslauriers <email address hidden> Tue, 19 Feb 2019 13:38:25 +0100
-
nss (2:3.35-2ubuntu2.1) bionic-security; urgency=medium
* SECURITY UPDATE: side-channel attack on ECDSA signatures
- debian/patches/CVE-2018-0495.patch: improve ecdsa and dsa in
nss/lib/freebl/dsa.c, nss/lib/freebl/ec.c.
- CVE-2018-0495
* SECURITY UPDATE: ServerHello.random is all zero in v2 ClientHello
- debian/patches/CVE-2018-12384-1.patch: fix random logic in
nss/lib/ssl/ssl3con.c.
- debian/patches/CVE-2018-12384-2.patch: add tests to
nss/gtests/ssl_gtest/ssl_loopback_unittest.cc,
nss/gtests/ssl_gtest/ssl_v2_client_hello_unittest.cc.
- CVE-2018-12384
* SECURITY UPDATE: cache side-channel variant of the Bleichenbacher attack
- debian/patches/CVE-2018-12404-1.patch: improve RSA key exchange
handling in nss/lib/ssl/ssl3con.c.
- debian/patches/CVE-2018-12404-2.patch: improve padding checks in
RSA_DecryptBlock in nss/gtests/freebl_gtest/rsa_unittest.cc,
nss/lib/freebl/rsapkcs.c.
- debian/patches/CVE-2018-12404-3.patch: add constant time
mp_to_fixlen_octets in nss/gtests/freebl_gtest/mpi_unittest.cc,
nss/lib/freebl/mpi/mpi.c, nss/lib/freebl/mpi/mpi.h.
- CVE-2018-12404
-- Marc Deslauriers <email address hidden> Wed, 12 Dec 2018 14:51:11 -0500
-
nss (2:3.35-2ubuntu2) bionic; urgency=medium
* d/p/lp1746947-revert-switch-default-to-sql.patch: the switch of the
default is still causing too much issues in consumers of nss.
So until resolved revert the switched default (LP: #1746947)
nss (2:3.35-2ubuntu1) bionic; urgency=medium
* Merge with Debian unstable. Remaining changes:
- When building with -O3, build with -Wno-error=maybe-uninitialized.
* Added Changes:
- d/libnss3.links: make freebl3 available as library (LP: #1744328)
+ d/control: add dh-exec to Build-Depends
+ d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
nss (2:3.35-2) unstable; urgency=medium
* nss/lib/freebl/Makefile: Build Hacl_Poly1305_64.o on arm64.
nss (2:3.35-1) unstable; urgency=medium
* New upstream release.
nss (2:3.34.1-1) unstable; urgency=medium
* New upstream release.
-- Christian Ehrhardt <email address hidden> Mon, 05 Feb 2018 11:36:07 +0100
-
nss (2:3.35-2ubuntu1) bionic; urgency=medium
* Merge with Debian unstable. Remaining changes:
- When building with -O3, build with -Wno-error=maybe-uninitialized.
* Added Changes:
- d/libnss3.links: make freebl3 available as library (LP: #1744328)
+ d/control: add dh-exec to Build-Depends
+ d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
-- Christian Ehrhardt <email address hidden> Tue, 30 Jan 2018 14:04:20 +0100
-
nss (2:3.34-1ubuntu1) bionic; urgency=medium
* Merge with Debian; remaining changes:
- When building with -O3, build with -Wno-error=maybe-uninitialized.
nss (2:3.34-1) unstable; urgency=medium
* New upstream release:
- Really build without -maes on i386. Closes: #875694.
* debian/libnss3.symbols: Add NSS_3_34 symbol version.
nss (2:3.33-1) unstable; urgency=medium
* New upstream release.
* debian/libnss3.symbols: Add NSS_3_33 and NSSUTIL_3.33 symbol versions.
nss (2:3.32-2) unstable; urgency=medium
* nss/gtests/ssl_gtest/ssl_ecdh_unittest.cc: Fix possibly uninitialized
value 'curve'. bz#1389263. Closes: #871691.
* lib/freebl/Makefile: Only build gcm.c and rijndael.c with -maes.
Closes: #871700.
-- Marc Deslauriers <email address hidden> Thu, 14 Dec 2017 09:18:47 -0500
-
nss (2:3.34-1) unstable; urgency=medium
* New upstream release:
- Really build without -maes on i386. Closes: #875694.
* debian/libnss3.symbols: Add NSS_3_34 symbol version.
-- Mike Hommey <email address hidden> Sat, 18 Nov 2017 14:58:01 +0900
-
nss (2:3.32-1ubuntu3) artful; urgency=medium
* SECURITY UPDATE: Use-after-free in TLS 1.2 generating handshake hashes
- debian/patches/CVE-2017-7805.patch: Simplify handling of
CertificateVerify in nss/lib/ssl/ssl3con.c, nss/lib/ssl/ssl3prot.h.
- CVE-2017-7805
-- Marc Deslauriers <email address hidden> Fri, 29 Sep 2017 12:17:39 -0400
