[Buildroot] [PATCH] package/libnss: security bump to version 3.42.1

Peter Korsgaard peter at korsgaard.com
Fri May 31 08:04:36 UTC 2019


On Fri, May 31, 2019 at 1:07 AM Peter Korsgaard <peter at korsgaard.com> wrote:
>
> Fixes the following security issues:
>
> (3.41) CVE-2018-12404: Cache side-channel variant of the Bleichenbacher
> attack
>
> (3.42.1) CVE-2018-18508: Add additional null checks to several CMS functions
> to fix a rare CMS crash.  Thanks to Hanno Böck and Damian Poddebniak for the
> discovery and fixes
>
> Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed, thanks.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list