[Buildroot] [PATCH] package/libnss: security bump to version 3.46

Peter Korsgaard peter at korsgaard.com
Sun Sep 1 09:03:06 UTC 2019


>>>>> "Baruch" == Baruch Siach <baruch at tkos.co.il> writes:

 > Hi Giulio,
 > On Sat, Aug 31 2019, Giulio Benetti wrote:
 >> Subject should be: "package/libnss: bump to version 3.46" without
 >> 'security'.

 > This bump fixes CVE-2019-11727 and CVE-2019-11719. The commit log should
 > mention that though.

Judging from the release notes, you also need to bump libnspr:

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes

NSS 3.46 requires NSPR 4.22 or newer.

Given that I plan on releasing 2019.08 tonight, this will most likely
have to wait for 2019.08.1.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list