]> code.ossystems Code Review - openembedded-core.git/commit
nss-3.15.1: fix CVE-2013-1739
authoryzhu1 <yanjun.zhu@windriver.com>
Wed, 18 Jun 2014 09:41:30 +0000 (05:41 -0400)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 29 Sep 2014 10:51:26 +0000 (11:51 +0100)
commit4ce30ef254511ce39dd576b80134b9316f9fa06c
treeb224ee267a5a8ffd370e6d7e2cb7f8abccb34fc8
parente2c81356f68eb0b77408e73f01df5bc5c9f2adb3
nss-3.15.1: fix CVE-2013-1739

Mozilla Network Security Services (NSS) before 3.15.2 does
not ensure that data structures are initialized before
read operations, which allows remote attackers to cause a
denial of service or possibly have unspecified other
impact via vectors that trigger a decryption failure.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1739
(From OE-Core rev: 9b43af77d112e75fa9827a9080b7e94f41f9a116)

Signed-off-by: yzhu1 <yanjun.zhu@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Conflicts:
meta/recipes-support/nss/nss.inc
meta/recipes-support/nss/files/nss-3.15.1-fix-CVE-2013-1739.patch [new file with mode: 0644]