Summary
nspr
[4.10.2-4]
- Rebase to nspr-4.10.6
- Resolves: Bug 1116199
[4.10.2-3]
- Retagging
- Resolves: rhbz#1032466
nss
[3.15.3-7]
- Remove an unused patch
- Related: Bug 1116199
[3.15.3-6]
- Fix race-condition in certificate validation
- Resolves: Bug 1116199
[3.15.3-5]
- Remove two unused patches
- Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | nspr | 0:4.10.6-1.el7_0 |
| Oracle Linux · 7 | nspr-devel | 0:4.10.6-1.el7_0 |
| Oracle Linux · 7 | nss | 0:3.15.4-7.0.1.el7_0 |
| Oracle Linux · 7 | nss-devel | 0:3.15.4-7.0.1.el7_0 |
| Oracle Linux · 7 | nss-pkcs11-devel | 0:3.15.4-7.0.1.el7_0 |
| Oracle Linux · 7 | nss-sysinit | 0:3.15.4-7.0.1.el7_0 |
| Oracle Linux · 7 | nss-tools | 0:3.15.4-7.0.1.el7_0 |
Vulnerabilities 1
-
Unscored —
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services…