aboutsummaryrefslogtreecommitdiffstats
path: root/README.OE-Core
diff options
context:
space:
mode:
authorOvidiu Panait <ovidiu.panait@windriver.com>2020-07-14 11:18:13 +0300
committerRichard Purdie <richard.purdie@linuxfoundation.org>2020-08-04 23:17:38 +0100
commit20757f3bb4bdb2c90ddd9cf3433605a5007bb1b5 (patch)
tree97916277c2ed88df93042c8361a1f5d0504f3dbf /README.OE-Core
parentcb791c2755d238305707281c3b9b0c8c34022952 (diff)
downloadpoky-20757f3bb4bdb2c90ddd9cf3433605a5007bb1b5.tar.gz
poky-20757f3bb4bdb2c90ddd9cf3433605a5007bb1b5.tar.bz2
poky-20757f3bb4bdb2c90ddd9cf3433605a5007bb1b5.zip
nss: Fix CVE-2020-12399
Master (nss version 3.54) is not affected by this issue. This is a backport from nss version 3.54. NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. Upstream patch: https://hg.mozilla.org/projects/nss/rev/daa823a4a29bcef0fec33a379ec83857429aea2e (From OE-Core rev: c447b32c1ec0c117748a4be68dda02d375c81b85) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'README.OE-Core')
0 files changed, 0 insertions, 0 deletions