Peter Korsgaard fd49d225a3 libnss: security bump to version 3.33 ...

Fixes CVE-2017-7805 - Martin Thomson discovered that nss, the Mozilla
Network Security Service library, is prone to a use-after-free vulnerability
in the TLS 1.2 implementation when handshake hashes are generated.  A remote
attacker can take advantage of this flaw to cause an application using the
nss library to crash, resulting in a denial of service, or potentially to
execute arbitrary code.

Also add a hash for the license file while we're at it.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
(cherry picked from commit 746502418f)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2017-10-15 23:03:45 +02:00

..

0001-uclibc.patch

libnss: security bump to version 3.30.2

2017-04-24 17:47:46 +02:00

Config.in

…

libnss.hash

libnss: security bump to version 3.33

2017-10-15 23:03:45 +02:00

libnss.mk

libnss: security bump to version 3.33

2017-10-15 23:03:45 +02:00

nss.pc.in

…