Skip to content
OpenAdvisories
Low ELSA-2014-1073 1 CVE

Low: nss, nss-util, nss-softokn security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 18, 2014 · Updated Aug 18, 2014

Summary

nss
[3.16.2-2.0.1.el7_0]
- Added nss-vendor.patch to change vendor

[3.16.2-2]
- Restore missing options descriptions fix for certutil manpage
- Document certutil options --dump-ext-val, --extGeneric, and --extSAN
- Related: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1

[3.16.2-1]
- Rebase to nss-3.16.2
- Resolves: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1 (FF 31)
- Fix test failure detection in the %check section
- Move removal of unwanted source directories to the end of the %prep section
- Update various patches on account of the rebase
- Remove unused patches rendered obsolete by the rebase
- Fix libssl and test patches that disable ssl2 support
- Replace expired PayPal test certificate that breaks the build

nss-softokn
[3.16.2-1]
- Update to nss-3.16.2
- Resolves: Bug 1124659 - Rebase RHEL 7.1 to at least NSS-SOFTOKN 3.16.1 (FF 31)

nss-util
[3.16.2-1]
- Update to nss-3.16.2
- Resolves: Bug 1124659 - Rebase RHEL-7.0 to at least NSS 3.16.1 (FF 31)

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 nss 0:3.16.2-2.0.1.el7_0
Oracle Linux · 7 nss-devel 0:3.16.2-2.0.1.el7_0
Oracle Linux · 7 nss-pkcs11-devel 0:3.16.2-2.0.1.el7_0
Oracle Linux · 7 nss-softokn 0:3.16.2-1.el7_0
Oracle Linux · 7 nss-softokn-devel 0:3.16.2-1.el7_0
Oracle Linux · 7 nss-softokn-freebl 0:3.16.2-1.el7_0
Oracle Linux · 7 nss-softokn-freebl-devel 0:3.16.2-1.el7_0
Oracle Linux · 7 nss-sysinit 0:3.16.2-2.0.1.el7_0
Oracle Linux · 7 nss-tools 0:3.16.2-2.0.1.el7_0
Oracle Linux · 7 nss-util 0:3.16.2-1.el7_0
Oracle Linux · 7 nss-util-devel 0:3.16.2-1.el7_0

Vulnerabilities 1

  • Unscored —

    The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Sec…