[Buildroot] [PATCH 2/2] libnss: security bump to version 3.30.2

[Thomas Petazzoni]

Hello,

On Thu, 20 Apr 2017 20:34:29 +0300, Baruch Siach wrote:
> CVE-2017-5461 - Out-of-bounds write in Base64 encoding in NSS. Might cause
> remote arbitrary code execution
> (https://access.redhat.com/errata/RHSA-2017:1100).
> 
> CVE-2017-5462 - DRBG flaw in NSS
> 
> Drop 0001-cross-compile.patch and TARGET* variables. Upstream Makefile now
> allows override of CC, so use TARGET_CONFIGURE_OPTS instead.
> 
> Drop upstream 0003-it-uninitialized-fix.patch.
> 
> Renumber the remaining patch.
> 
> Signed-off-by: Baruch Siach <baruch at tkos.co.il>
> ---
> Backport note: depends on libnspr version 4.14
> ---
>  package/libnss/0001-cross-compile.patch            | 48 ----------------------
>  .../{0002-uclibc.patch => 0001-uclibc.patch}       |  0
>  package/libnss/0003-it-uninitialized-fix.patch     | 24 -----------
>  package/libnss/libnss.hash                         |  4 +-
>  package/libnss/libnss.mk                           | 12 ++----
>  5 files changed, 6 insertions(+), 82 deletions(-)
>  delete mode 100644 package/libnss/0001-cross-compile.patch
>  rename package/libnss/{0002-uclibc.patch => 0001-uclibc.patch} (100%)
>  delete mode 100644 package/libnss/0003-it-uninitialized-fix.patch

Applied to master, thanks.

Peter: we want this patch for the LTS branch. Baruch, can you comment
on whether PATCH 1/2 is also needed for the libnss security bump?

Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com