Univention Bugzilla – Bug 54376
nss: Multiple issues (4.4)
Last modified: 2022-01-26 16:57:47 CET
New Debian nss 2:3.26.2-1.1+deb9u5 fixes: This update addresses the following issue: * Crash when handling empty pkcs7 sequence (CVE-2022-22747)
--- mirror/ftp/4.4/unmaintained/component/4.4-8-errata/source/nss_3.26.2-1.1+deb9u4.dsc +++ apt/ucs_4.4-0-errata4.4-8/source/nss_3.26.2-1.1+deb9u5.dsc @@ -1,3 +1,8 @@ +2:3.26.2-1.1+deb9u5 [Tue, 25 Jan 2022 12:28:45 +0100] Emilio Pozuelo Monfort <pochu@debian.org>: + + * Non-maintainer upload by the LTS team. + * CVE-2022-22747: null pointer dereference on empty pkcs7 sequence. + 2:3.26.2-1.1+deb9u4 [Tue, 07 Dec 2021 14:08:03 +0530] Utkarsh Gupta <utkarsh@debian.org>: * Non-maintainer upload by the LTS team. <http://piuparts.knut.univention.de/4.4-8/#1237137892643851186>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-8] 0b920ea4c6 Bug #54376: nss 2:3.26.2-1.1+deb9u5 doc/errata/staging/nss.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x1161>