Summary
[3.36.0-7]
- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
mistake (the symbol was not exported from libnss)
[3.36.0-6]
- Exercise SSL tests which only run under non-FIPS setting
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | nss | 0:3.36.0-7.el7_5 |
| Oracle Linux · 7 | nss-devel | 0:3.36.0-7.el7_5 |
| Oracle Linux · 7 | nss-pkcs11-devel | 0:3.36.0-7.el7_5 |
| Oracle Linux · 7 | nss-sysinit | 0:3.36.0-7.el7_5 |
| Oracle Linux · 7 | nss-tools | 0:3.36.0-7.el7_5 |
Vulnerabilities 1
-
Unscored —
When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-z…