Ubuntu
cryptojs package

cryptojs 3.1.2+dfsg-2ubuntu0.20.04.1 source package in Ubuntu

Changelog

cryptojs (3.1.2+dfsg-2ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: weak hash algorithm (SHA1) and iterations (1) in PBKDF2.
    - debian/build: include SHA256 as dependency instead of SHA1.
    - debian/patches/CVE-2023-46233.patch: modify default PBKDF2 configurations
      to use SHA256 and 250k iterations.
    - CVE-2023-46233.

 -- Federico Quattrin <email address hidden>  Wed, 24 Apr 2024 11:46:50 -0300

Upload details

Uploaded by:
Federico Quattrin
Sponsored by:
Emilia Torino
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
web
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe misc
Focal security universe misc

Builds

Focal: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
cryptojs_3.1.2+dfsg.orig.tar.xz 29.5 KiB e9bdcd97bc9a7de6cd4f0a8f8239163030aca651a175ee88c3859e04f05d284b
cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1.debian.tar.xz 4.4 KiB d214551e0e67890a6bcc061658e48aea5e445c8313a9f87a884ee0db1e4457e2
cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1.dsc 2.0 KiB c8b271442d1d9a59af652daa31b57ebbc66af39062ec9b168d7c68a3b6f090ce

View changes file

Binary packages built by this source

libjs-cryptojs: collection of cryptographic algorithms implemented in JavaScript

 CryptoJS is a growing collection of standard and secure cryptographic
 algorithms implemented in JavaScript using best practices and patterns. They
 are fast, and they have a consistent and simple interface.