nss 2:3.28.4-0ubuntu0.16.04.14 source package in Ubuntu
Changelog
nss (2:3.28.4-0ubuntu0.16.04.14) xenial-security; urgency=medium
* SECURITY UPDATE: Out-of-bounds read
- debian/patches/CVE-2020-12403-2.patch: fix incorrect call to ChaChaPoly1305 by PKCS11
in nss/lib/freebl/chacha20poly1305.c.
- CVE-2020-12403
-- <email address hidden> (Leonidas S. Barbosa) Fri, 21 Aug 2020 15:41:08 -0300
Upload details
- Uploaded by:
- Leonidas S. Barbosa
- Uploaded to:
- Xenial
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- libs
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section | |
|---|---|---|---|---|
| Xenial | updates | main | libs | |
| Xenial | security | main | libs |
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| nss_3.28.4.orig.tar.gz | 7.1 MiB | d5d4761778b8d4c378b2174c9e13e7abd20a6961f557d4fcc029af723ffd7189 |
| nss_3.28.4-0ubuntu0.16.04.14.debian.tar.xz | 211.7 KiB | df1c503c9d3ed32ce7d73a01475609b17ec60b0255f17cf15712e732febc04d1 |
| nss_3.28.4-0ubuntu0.16.04.14.dsc | 2.4 KiB | 46de893ae500451e3cd31f10547dec88ae17cec1253abafd48711c10ff7b2d85 |
Available diffs
Binary packages built by this source
- libnss3: Network Security Service libraries
This is a set of libraries designed to support cross-platform development
of security-enabled client and server applications. It can support SSLv2
and v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
other security standards.
- libnss3-1d: Network Security Service libraries - transitional package
This is a transitional package to ensure smooth transition of all packages
to libnss3.
- libnss3-dbg: Debugging symbols for the Network Security Service libraries
This is a set of libraries designed to support cross-platform development
of security-enabled client and server applications. It can support SSLv2
and v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
other security standards.
.
This package provides the debugging symbols for the library.
- libnss3-dbgsym: debug symbols for package libnss3
This is a set of libraries designed to support cross-platform development
of security-enabled client and server applications. It can support SSLv2
and v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
other security standards.
- libnss3-dev: Development files for the Network Security Service libraries
This is a set of libraries designed to support cross-platform development
of security-enabled client and server applications. It can support SSLv2
and v4, TLS, PKCS #5, #7, #11, #12, S/MIME, X.509 v3 certificates and
other security standards.
.
Install this package if you wish to develop your own programs using the
Network Security Service Libraries.
- libnss3-nssdb: Network Security Security libraries - shared databases
This package includes shared certificate and key databases.
- libnss3-tools: Network Security Service tools
This is a set of tools on top of the Network Security Service libraries.
This package includes:
* certutil: manages certificate and key databases (cert7.db and key3.db)
* modutil: manages the database of PKCS11 modules (secmod.db)
* pk12util: imports/exports keys and certificates between the cert/key
databases and files in PKCS12 format.
* shlibsign: creates .chk files for use in FIPS mode.
* signtool: creates digitally-signed jar archives containing files and/or
code.
* ssltap: proxy requests for an SSL server and display the contents of
the messages exchanged between the client and server.
- libnss3-tools-dbgsym: debug symbols for package libnss3-tools
This is a set of tools on top of the Network Security Service libraries.
This package includes:
* certutil: manages certificate and key databases (cert7.db and key3.db)
* modutil: manages the database of PKCS11 modules (secmod.db)
* pk12util: imports/exports keys and certificates between the cert/key
databases and files in PKCS12 format.
* shlibsign: creates .chk files for use in FIPS mode.
* signtool: creates digitally-signed jar archives containing files and/or
code.
* ssltap: proxy requests for an SSL server and display the contents of
the messages exchanged between the client and server.
