Summary
nss
[3.19.1-3.0.1]
- Added nss-vendor.patch to change vendor
[3.19.1-3]
- Additional NULL initialization.
[3.19.1-2]
- Updated the patch to keep old cipher suite order
- Resolves: Bug 1224449
[3.19.1-1]
- Rebase to nss-3.19.1
- Resolves: Bug 1224449
nss-util
[3.19.0-1]
- Rebase to nss-3.19.1
- Resolves: Bug 1224449
[3.18.0-1]
- Resolves: - Bug 1205064 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | nss | 0:3.19.1-3.0.1.el7_1 |
| Oracle Linux · 7 | nss-devel | 0:3.19.1-3.0.1.el7_1 |
| Oracle Linux · 7 | nss-pkcs11-devel | 0:3.19.1-3.0.1.el7_1 |
| Oracle Linux · 7 | nss-sysinit | 0:3.19.1-3.0.1.el7_1 |
| Oracle Linux · 7 | nss-tools | 0:3.19.1-3.0.1.el7_1 |
| Oracle Linux · 7 | nss-util | 0:3.19.1-1.el7_1 |
| Oracle Linux · 7 | nss-util-devel | 0:3.19.1-1.el7_1 |
Vulnerabilities 1
-
Low 3.7
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…