Skip to content
OpenAdvisories
High ELSA-2019-4190 2 CVEs

Important: nss, nss-softokn, nss-util security update (Oracle Linux 7)

Published Dec 11, 2019 · Updated Dec 11, 2019

Summary

nss
[3.44.0-7]
- Increase timeout on ssl_gtest so that slow platforms can complete when
running on a busy system.

[3.44.0-6]
- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)

[3.44.0-5]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)

nss-softokn
[3.44.0-8.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814],
[Orabug: 26617879], [Orabug: 26617849]

[3.44.0-8]
- Fix segfault on empty or malformed ecdh keys (#1777712)

[3.44.0-7]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)

[3.44.0-6]
- Fix fipstest to use the standard mechanism for TLS 1.2 PRF

nss-util
[3.44.0-4]
- Fix segfault on empty or malformed ecdh keys (#1777712)

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 nss 0:3.44.0-7.el7_7
Oracle Linux · 7 nss-devel 0:3.44.0-7.el7_7
Oracle Linux · 7 nss-pkcs11-devel 0:3.44.0-7.el7_7
Oracle Linux · 7 nss-softokn 0:3.44.0-8.0.1.el7_7
Oracle Linux · 7 nss-softokn-devel 0:3.44.0-8.0.1.el7_7
Oracle Linux · 7 nss-softokn-freebl 0:3.44.0-8.0.1.el7_7
Oracle Linux · 7 nss-softokn-freebl-devel 0:3.44.0-8.0.1.el7_7
Oracle Linux · 7 nss-sysinit 0:3.44.0-7.el7_7
Oracle Linux · 7 nss-tools 0:3.44.0-7.el7_7
Oracle Linux · 7 nss-util 0:3.44.0-4.el7_7
Oracle Linux · 7 nss-util-devel 0:3.44.0-4.el7_7

Vulnerabilities 2