Summary
nspr
[4.25.0-2]
- Rebuild
[4.25.0-1]
- Update to NSPR 4.25
nss
[3.53.1-11]
- Fix issue with upgradedb where upgradedb expects standard to
generate dbm databases, not sql databases (default in RHEL8)
[3.53.1-10]
- Disable dh timing test because it's unreliable on s390
[3.53.1-9]
- Explicitly enable upgradedb/sharedb test cycles
[3.53.1-8]
- Disable Delegated Credentials for TLS
[3.53.1-7]
- Fix attribute decryption issue where the private key components
integrity check on private attributes where not being checked.
[3.53.1-6]
- Update nss-rsa-pkcs1-sigalgs.patch to the upstream version
[3.53.1-5]
- Include required checks for dh and ecdh key generation in FIPS mode.
[3.53.1-4]
- Add better checks for dh derive operations in FIPS mode.
[3.53.1-3]
- Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
- Adjust for update-crypto-policies packaging change (#1848649)
- Fix compilation with -Werror=strict-prototypes (#1843417)
[3.53.1-2]
- Fix regression in MD5 disablement (#1849938)
- Include rsa_pkcs1_* in signature_algorithms extension (#1847945)
[3.53.1-1]
- Update to NSS 3.53.1
[3.53.0-1]
- Update to NSS 3.53
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | nspr | 0:4.25.0-2.el8_2 |
| Oracle Linux · 8 | nspr-devel | 0:4.25.0-2.el8_2 |
| Oracle Linux · 8 | nss | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-devel | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-softokn | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-softokn-devel | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-softokn-freebl | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-softokn-freebl-devel | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-sysinit | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-tools | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-util | 0:3.53.1-11.el8_2 |
| Oracle Linux · 8 | nss-util-devel | 0:3.53.1-11.el8_2 |
Vulnerabilities 4
-
Unscored —
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial o…
-
Unscored —
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…