Summary
[3.19.1-8.0.1]
- Added nss-vendor.patch to change vendor
[3.19.1-8]
- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Resolves: Bug 1289881
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | nss | 0:3.19.1-19.0.1.el7_2 |
| Oracle Linux · 7 | nss-devel | 0:3.19.1-19.0.1.el7_2 |
| Oracle Linux · 7 | nss-pkcs11-devel | 0:3.19.1-19.0.1.el7_2 |
| Oracle Linux · 7 | nss-sysinit | 0:3.19.1-19.0.1.el7_2 |
| Oracle Linux · 7 | nss-tools | 0:3.19.1-19.0.1.el7_2 |
Vulnerabilities 1
-
Unscored —
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x be…