621664
|
|
TB crashes in non-crypto code after attempt to generate signed msg fails
|
NSS
|
Libraries
|
dcooper16
|
RESO
|
FIXE
|
2011-10-07
|
660394
|
|
Timing attack on ECDSA (especially over binary curves)
|
NSS
|
Libraries
|
douglas
|
RESO
|
FIXE
|
2017-02-28
|
683424
|
|
tstclnt emits "SSL peer is in another FORTEZZA domain." error messages
|
NSS
|
Libraries
|
elio.maldonado.batiz
|
RESO
|
FIXE
|
2011-10-05
|
642503
|
|
Generic blacklisting mechanism for bogus certs (NSS trust module)
|
NSS
|
Libraries
|
rrelyea
|
RESO
|
FIXE
|
2012-02-14
|
679380
|
|
Errors parsing nested CMS messages make the encapsulated content irretrievable
|
NSS
|
Libraries
|
rrelyea
|
RESO
|
FIXE
|
2012-03-01
|
580137
|
|
Merge SOFTOKEN_3_13_BRANCH onto the NSS trunk
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-07-21
|
593080
|
|
Change the default of the SSL_ENABLE_SSL2 option to PR_FALSE
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-10-06
|
641052
|
|
NSS_NoDB_Init should not try to open /pkcs11.txt and /secmod.db
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-10-27
|
596215
|
|
NSS should provide a way to find ALL valid certs for an email address
|
NSS
|
Libraries
|
brauckmann
|
RESO
|
FIXE
|
2010-11-19
|
632657
|
|
SEC_ASN1IsTemplateSimple may treat choice templates as simple
|
NSS
|
Libraries
|
brian
|
RESO
|
FIXE
|
2011-10-06
|
172051
|
|
Add localizable error messages for NSS error codes
|
NSS
|
Libraries
|
elio.maldonado.batiz
|
RESO
|
FIXE
|
2013-03-14
|
627806
|
|
Unimplemented CERT_DecodeCertificate should be removed from cert.h
|
NSS
|
Libraries
|
elio.maldonado.batiz
|
RESO
|
FIXE
|
2011-02-02
|
684389
|
|
Bad EOF check in pkix_pl_infoaccess.c
|
NSS
|
Libraries
|
elio.maldonado.batiz
|
RESO
|
FIXE
|
2011-09-07
|
374247
|
|
modutil -disable command not disabling modules' slots
|
NSS
|
Libraries
|
glenbeasley
|
RESO
|
FIXE
|
2009-11-11
|
662362
|
|
Don't use -mno-cygwin on mingw compilation (NSS part)
|
NSS
|
Build
|
jacek
|
RESO
|
FIXE
|
2011-09-14
|
662652
|
|
Leak of SFTKDBHandle->passwordKey.data
|
NSS
|
Libraries
|
mattm
|
RESO
|
FIXE
|
2011-09-01
|
551188
|
|
support building nss on hpux with gcc and GNU-as
|
NSS
|
Libraries
|
michael.haubenwallner
|
RESO
|
FIXE
|
2010-05-03
|
628114
|
|
crash in ckcapi_mdObject_Destroy when trying to delete a certificate
|
NSS
|
Libraries
|
mmahkamov
|
RESO
|
FIXE
|
2011-01-29
|
628115
|
|
nss_ckcapi_WideToUTF8 sometimes leads to a crash
|
NSS
|
Libraries
|
mmahkamov
|
RESO
|
FIXE
|
2011-01-29
|
628118
|
|
crash nss_ckcapi_CreateObject when importing a trust object
|
NSS
|
Libraries
|
mmahkamov
|
RESO
|
FIXE
|
2011-01-29
|
628227
|
|
nss_ckcapi_DERUnwrap incorrectly handles "short form" length encoding
|
NSS
|
Libraries
|
mmahkamov
|
RESO
|
FIXE
|
2011-02-02
|
592489
|
|
libsmime unable to decrypt Outlook 2010 mail encrypted with smartcard-based key
|
NSS
|
Libraries
|
mozbgz
|
RESO
|
FIXE
|
2011-02-20
|
388978
|
|
Add EV-defined subject name attributes
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2010-09-18
|
550208
|
|
ECDH_Derive calls mp_clear for uninitialized k when PORT_Alloc(...) fails
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2010-04-04
|
550439
|
|
s_mp_div calls mp_clear(&t) with uninitialized t when mp_copy fails for s_mp_ispow2(div)
|
NSS
|
Libraries
|
nelson
|
RESO
|
FIXE
|
2010-04-04
|
515663
|
|
Improper setting of CKA_DERIVE attribute during PKCS #12 import
|
NSS
|
Libraries
|
rrelyea
|
RESO
|
FIXE
|
2011-10-06
|
561577
|
|
Softoken crashes when cert8.db file contains cert with invalid extension encodings [@ SECITEM_Hash ]
|
NSS
|
Libraries
|
rrelyea
|
RESO
|
FIXE
|
2011-06-13
|
685592
|
|
File descriptor leak after "service httpd reload"
|
NSS
|
Libraries
|
rrelyea
|
RESO
|
FIXE
|
2011-09-30
|
469585
|
|
Coverity: potential leaks in all uses of SFTK_HANDLE_STRING_ARG
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-28
|
587419
|
|
listCertsCallback leaks CERT_DupCertificate(cert) when CERT_AddCertToListTailWithData fails
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2011-01-15
|
586790
|
|
shlibsign fails to load libfreebl3 on PA-RISC 1.1 HP-UX 11.11/11.00
|
NSS
|
Build
|
ul.mcamafia
|
RESO
|
FIXE
|
2011-01-15
|
573367
|
|
Update mozilla/security/nss/lib/zlib to zlib 1.2.5
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-09-02
|
585842
|
|
CERT_MakeCANickname returns static string in error case
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-09-09
|
586163
|
|
Document the change to PKCS #12 nickname collision callback in NSS 3.12
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-09-13
|
586470
|
|
Add 'const' to SEC_DerSignData, ssl3_UpdateHandshakeHashes. Remove PK11_ImportPrivateKey.
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-08-11
|
600438
|
|
Fix the locking order assertion in ssl_Get1stHandshakeLock
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-10-20
|
606049
|
|
Add the SSL peer's CA certificates to ss->ssl3.peerCertChain in the correct order.
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-10-21
|
652727
|
|
Remove "linguist" from the perl executable pathnames in mpi's Perl scripts
|
NSS
|
Build
|
wtc
|
RESO
|
FIXE
|
2011-05-23
|
671787
|
|
Remove an unnecessary PORT_Strdup call in secmod_LoadPKCS11Module
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-07-15
|
673477
|
|
Expose the error code set by CERT_ExtractPublicKey
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-07-25
|
675325
|
|
Add "const" to the inDerCert parameter of PK11_FindCertFromDERCertItem.
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-07-29
|
686606
|
|
Fix compiler warnings in NSS 3.13
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-10-04
|
569832
|
|
Block cipher MAC'ing mechanisms (softoken) aren't working.
|
NSS
|
Libraries
|
grapvar
|
RESO
|
FIXE
|
2011-09-21
|
510141
|
|
Consolidate NO_FORK_CHECK and NO_CHECK_FORK symbols
|
NSS
|
Libraries
|
julien.pierre
|
RESO
|
FIXE
|
2010-04-03
|
572085
|
|
ARM optimization for MPI
|
NSS
|
Libraries
|
m_kato
|
RESO
|
FIXE
|
2011-04-25
|
591553
|
|
Use NSS_X86_OR_X64 on i386 Mac OS X
|
NSS
|
Build
|
m_kato
|
RESO
|
FIXE
|
2011-02-06
|
600106
|
|
Use "REV" instruction or __builtin_bswap32 for byteswap code for ARM
|
NSS
|
Libraries
|
m_kato
|
RESO
|
FIXE
|
2011-02-08
|
577268
|
|
Correct misspellings in NSS source code
|
NSS
|
Libraries
|
me
|
RESO
|
FIXE
|
2011-03-28
|
593422
|
|
Enhance pp to print DER Names (e.g. certificate subject)
|
NSS
|
Tools
|
nelson
|
RESO
|
FIXE
|
2010-09-03
|
341124
|
|
Coverity 522 Callers of mp_unsigned_octet_size don't check for negative return value
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-15
|
507374
|
|
useless null check of dbkey.data in DeleteDBCertEntry
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-15
|
507376
|
|
useless null check of global_salt in nsslowkey_GetPWCheckEntry
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-15
|
507377
|
|
useless null check of params in nsc_parameter_gen
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-15
|
602754
|
|
Fix "a the" in comments (for NSS code)
|
NSS
|
Libraries
|
arcuscc1
|
RESO
|
FIXE
|
2010-10-11
|
665814
|
|
Rizzo/Duong chosen plaintext attack (BEAST) on SSL/TLS 1.0 (facilitated by websockets -76)
|
NSS
|
Libraries
|
brian
|
RESO
|
FIXE
|
2014-06-26
|
535931
|
|
ECC wrong signatures for curves with field size != base point order
|
NSS
|
Libraries
|
douglas
|
RESO
|
FIXE
|
2010-02-04
|
356713
|
|
SHA224 hash / hmac algorithm not supported
|
NSS
|
Libraries
|
elio.maldonado.batiz
|
RESO
|
FIXE
|
2011-09-14
|
581804
|
|
vfychain should call PL_ArenaFinish before exit
|
NSS
|
Tools
|
hanno
|
RESO
|
FIXE
|
2010-07-27
|
582800
|
|
certutil: fix memory leaks
|
NSS
|
Tools
|
hanno
|
RESO
|
FIXE
|
2010-08-10
|
590991
|
|
Implement a tool to externally "test for existing valid .chk file", without loading the tested shared library (chktest)
|
NSS
|
Tools
|
kaie
|
RESO
|
FIXE
|
2010-12-06
|
673115
|
|
Add function to obtain version of NSS at runtime.
|
NSS
|
Libraries
|
kaie
|
RESO
|
FIXE
|
2012-02-19
|
676886
|
|
NSS' internal HTTP client should exclude :port for OCSP requests on default port 80
|
NSS
|
Libraries
|
kaie
|
RESO
|
FIXE
|
2011-08-10
|
681382
|
|
Remove from fipstest dependencies on higher layers of nss
|
NSS
|
Libraries
|
nobody
|
RESO
|
FIXE
|
2011-10-28
|
686761
|
|
crlutil -f switch ignored when importing CRLs in FIPS mode
|
NSS
|
Tools
|
nobody
|
RESO
|
FIXE
|
2011-09-16
|
679524
|
|
Crash in NSS when using NSS_InitContext
|
NSS
|
Libraries
|
rrelyea
|
RESO
|
FIXE
|
2012-03-01
|
680878
|
|
Support for building NSS for iOS
|
NSS
|
Build
|
ted
|
RESO
|
FIXE
|
2011-08-24
|
550193
|
|
ec_NewKey calls mp_clear for uninitialized k when SECITEM_CopyItem(...) fails
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-14
|
550869
|
|
RSA_PrivateKeyCheck doesn't MP_DIGITS = 0 all locals before using CHECK_MPI_OK mp_init
|
NSS
|
Libraries
|
timeless
|
RESO
|
FIXE
|
2010-03-14
|
508113
|
|
Camellia cipher causes datatype misalignment on Windows CE
|
NSS
|
Libraries
|
vladimir
|
RESO
|
FIXE
|
2010-04-29
|
511515
|
|
NSS is forking on init during startup
|
NSS
|
Libraries
|
vladimir
|
RESO
|
FIXE
|
2010-04-29
|
411553
|
|
performance optimizations for camellia
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2009-08-26
|
483461
|
|
Change some Mac OS X compiler flags
|
NSS
|
Build
|
wtc
|
RESO
|
FIXE
|
2010-07-28
|
495358
|
|
Remove remaining Classic Mac OS code
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-02-09
|
506804
|
|
libnssutil3.so and libnssdbm3.so contain no version string.
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-04-03
|
534916
|
|
Rename functions or variables to avoid duplicate symbols in fully static builds
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-01-07
|
545440
|
|
Increase the read buffer size in BLAPI_SHVerify
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2010-02-10
|
583966
|
|
Remove unnecessary "REQUIRES = dbm" from manifest.mn
|
NSS
|
Build
|
wtc
|
RESO
|
FIXE
|
2014-06-30
|
669060
|
|
Release NSS 3.13.0
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-10-15
|
673412
|
|
Fix error message typos (CERT_PKIXVerifyChain) in cmd/vfychain/vfychain.c
|
NSS
|
Tools
|
wtc
|
RESO
|
FIXE
|
2011-07-22
|
673413
|
|
SEC_QuickDERDecodeItem reports SEC_ERROR_INVALID_ARGS if the 'src' SECItem is empty but has null 'data' pointer
|
NSS
|
Libraries
|
wtc
|
RESO
|
FIXE
|
2011-08-04
|
512482
|
|
Remove "MOZ_BITS == 16" parts, in dbm
|
NSS
|
Build
|
bugzillamozillaorg_serge_20...
|
VERI
|
FIXE
|
2014-07-02
|