UbuntuUpdates.org

Package "nss"

Name: nss

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Network Security Service libraries
  • Development files for the Network Security Service libraries

Latest version: 2:3.49.1-1ubuntu1.2
Release: focal (20.04)
Level: security
Repository: main

Links



Other versions of "nss" in Focal

Repository Area Version
base universe 2:3.49.1-1ubuntu1
base main 2:3.49.1-1ubuntu1
security universe 2:3.49.1-1ubuntu1.2
updates universe 2:3.49.1-1ubuntu1.2
updates main 2:3.49.1-1ubuntu1.2
proposed main 2:3.49.1-1ubuntu1.3
proposed universe 2:3.49.1-1ubuntu1.3

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2:3.49.1-1ubuntu1.2 2020-07-07 10:07:09 UTC

  nss (2:3.49.1-1ubuntu1.2) focal-security; urgency=medium

  * SECURITY UPDATE: Side channel vulnerabilities during RSA key generation
    - debian/patches/CVE-2020-12402.patch: use constant-time GCD and
      modular inversion in nss/lib/freebl/mpi/mpi.c,
      nss/lib/freebl/mpi/mpi.h, nss/lib/freebl/mpi/mplogic.c.
    - CVE-2020-12402

 -- Marc Deslauriers <email address hidden> Mon, 22 Jun 2020 13:29:53 -0400

Source diff to previous version
CVE-2020-12402 Side channel vulnerabilities during RSA key generation

Version: 2:3.49.1-1ubuntu1.1 2020-06-16 18:06:56 UTC

  nss (2:3.49.1-1ubuntu1.1) focal-security; urgency=medium

  * SECURITY UPDATE: Timing attack during DSA key generation
    - debian/patches/CVE-2020-12399.patch: force a fixed length for DSA
      exponentiation in nss/lib/freebl/dsa.c.
    - CVE-2020-12399

 -- Marc Deslauriers <email address hidden> Wed, 10 Jun 2020 12:54:12 -0400

CVE-2020-12399 Force a fixed length for DSA exponentiation



About   -   Send Feedback to @ubuntu_updates