![Baruch Siach](/assets/img/avatar_default.png)
CVE-2017-5461 - Out-of-bounds write in Base64 encoding in NSS. Might cause remote arbitrary code execution (https://access.redhat.com/errata/RHSA-2017:1100). CVE-2017-5462 - DRBG flaw in NSS Drop 0001-cross-compile.patch and TARGET* variables. Upstream Makefile now allows override of CC, so use TARGET_CONFIGURE_OPTS instead. Drop upstream 0003-it-uninitialized-fix.patch. Renumber the remaining patch. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
21 lines
590 B
Diff
21 lines
590 B
Diff
uCLibc does not define RTLD_NOLOAD.
|
|
|
|
[Gustavo: update for nss 3.16.1]
|
|
Signed-off-by: Will Newton <will.newton@imgtec.com>
|
|
|
|
diff -Nura nss-3.16.1.orig/nss/lib/freebl/stubs.c nss-3.16.1/nss/lib/freebl/stubs.c
|
|
--- nss-3.16.1.orig/nss/lib/freebl/stubs.c 2014-06-18 10:34:30.529997002 -0300
|
|
+++ nss-3.16.1/nss/lib/freebl/stubs.c 2014-06-18 10:36:25.508882650 -0300
|
|
@@ -594,6 +594,11 @@
|
|
return SECSuccess;
|
|
}
|
|
|
|
+/* uClibc does not define RTLD_NOLOAD. */
|
|
+#ifndef RTLD_NOLOAD
|
|
+#define RTLD_NOLOAD 0
|
|
+#endif
|
|
+
|
|
/*
|
|
* fetch the library if it's loaded. For NSS it should already be loaded
|
|
*/
|