High ELSA-2017-1365 1 CVE

Important: nss security and bug fix update (Oracle Linux 7)

Published May 30, 2017 · Updated May 30, 2017

Ecosystem: Oracle Linux

Summary

[3.28.4-1.2.0.1]
- Added nss-vendor.patch to change vendor

[3.28.4-1.2]
- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5

[3.28.4-1.1]
- Fix zero-length record treatment in SSL3_GatherData

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	nss	0:3.28.4-1.2.0.1.el7_3
Oracle Linux · 7	nss-devel	0:3.28.4-1.2.0.1.el7_3
Oracle Linux · 7	nss-pkcs11-devel	0:3.28.4-1.2.0.1.el7_3
Oracle Linux · 7	nss-sysinit	0:3.28.4-1.2.0.1.el7_3
Oracle Linux · 7	nss-tools	0:3.28.4-1.2.0.1.el7_3

Vulnerabilities 1

Unscored —

CVE-2017-7502

Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resultin…

NSS project nss nss nss Debian Ubuntu Azure Linux

May 30, 2017