mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-05 00:09:52 +00:00
Investigation based on https://bugzilla.mozilla.org/show_bug.cgi?id=1774654 leads to following: * fixed in 3.87 (a7f3635113) * changed code was introduced in 3.77 (be6a97823b) * NVD claims fix in 3.81, but there is no evidence for it in commit history (a7f3635113) * Debian also says for old versions "nss <not-affected> (Vulnerable code not present/was introduced later)" (https://security-tracker.debian.org/tracker/CVE-2022-3479) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>