[tbb-bugs] #18017 [Tor Browser]: Switch to NSS 3.19.2.2 to mitigate SLOTH attack (CVE-2015-7575)

Tue Jan 12 15:27:20 UTC 2016

#18017: Switch to NSS 3.19.2.2 to mitigate SLOTH attack (CVE-2015-7575)
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
     Type:  task                                 |  team
 Priority:  Very High                            |         Status:
Component:  Tor Browser                          |  needs_review
 Severity:  Critical                             |      Milestone:
 Keywords:  tbb-security,                        |        Version:
  TorBrowserTeam201601R, tbb-5.5                 |     Resolution:
Parent ID:                                       |  Actual Points:
  Sponsor:                                       |         Points:
-------------------------------------------------+-------------------------
Changes (by gk):

 * keywords:  tbb-security, TorBrowserTeam201601, tbb-5.5 => tbb-security,
     TorBrowserTeam201601R, tbb-5.5
 * status:  new => needs_review

Comment:

 bug_18017 in my public tor-browser repo
 (https://gitweb.torproject.org/user/gk/tor-
 browser.git/commit/?h=bug_18017) has switch to NSS 3.19.2.2 up for review.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18017#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online