bug#52228: closed (NSS CVE-2021-43527 "memory corruption validating dsa/rsa-pss signatures")

[GNU bug Tracking System]

Your message dated Tue, 22 Mar 2022 22:34:36 -0400
with message-id <87zglhz9ab.fsf@gmail.com>
and subject line Re: bug#52228: NSS CVE-2021-43527 "memory corruption 
validating dsa/rsa-pss signatures"
has caused the debbugs.gnu.org bug report #52228,
regarding NSS CVE-2021-43527 "memory corruption validating dsa/rsa-pss 
signatures"
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@gnu.org.)


-- 
52228: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=52228
GNU Bug Tracking System
Contact help-debbugs@gnu.org with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> NSS CVE-2021-43527 "memory corruption validating dsa/rsa-pss signatures"
>
>
>
>
> Date: 
>
> Wed, 1 Dec 2021 12:34:27 -0500
>
>
>
>
> An attacker-controlled memory corruption vulnerability was discovered in
> NSS:
>
> https://bugs.chromium.org/p/project-zero/issues/detail?id=2237
>
>
>
> --- End Message ---
> --- Begin Message ---
>
>
>
> Subject: 
>
> Re: bug#52228: NSS CVE-2021-43527 "memory corruption validating dsa/rsa-pss signatures"
>
>
>
>
> Date: 
>
> Tue, 22 Mar 2022 22:34:36 -0400
>
>
>
>
> User-agent: 
>
> Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
>
>
>
>
> Hello,
>
> Leo Famulari <leo@famulari.name> writes:
>
> > On Fri, Dec 03, 2021 at 07:28:18PM -0500, Mark H Weaver wrote:
> >> Hi,
> >> 
> >> For the record, I've pushed commits
> >> 080a5de2eeb5e0da83ae9fd94488508d5227c4e3 and
> >> d49e7a592f2f12cd1f9e07edfeebe0a2771f491e to the 'master' branch, which I
> >> believe should fix this issue in our 'nss', 'icecat', 'icedove',
> >> 'icedove-wayland', and 'geierlein' packages.
> >
> > Thanks for working on it, Mark.
> >
> >> Does anyone know if there are other packages in Guix that include a
> >> bundled copy of NSS?  If not, I guess this bug can be closed.
> >
> > Personally I don't know... I hope not. Let's wait a couple more days
> > before closing.
>
> It's been 15 weeks :-).
>
> Closing.
>
> Maxim
>
>
> --- End Message ---