Skip to content
OpenAdvisories
Medium ELSA-2020-3280 4 CVEs

Moderate: nss and nspr security, bug fix, and enhancement update (Oracle Linux 8)

Published Aug 4, 2020 · Updated Aug 4, 2020

Summary

nspr
[4.25.0-2]
- Rebuild

[4.25.0-1]
- Update to NSPR 4.25

nss
[3.53.1-11]
- Fix issue with upgradedb where upgradedb expects standard to
generate dbm databases, not sql databases (default in RHEL8)

[3.53.1-10]
- Disable dh timing test because it's unreliable on s390

[3.53.1-9]
- Explicitly enable upgradedb/sharedb test cycles

[3.53.1-8]
- Disable Delegated Credentials for TLS

[3.53.1-7]
- Fix attribute decryption issue where the private key components
integrity check on private attributes where not being checked.

[3.53.1-6]
- Update nss-rsa-pkcs1-sigalgs.patch to the upstream version

[3.53.1-5]
- Include required checks for dh and ecdh key generation in FIPS mode.

[3.53.1-4]
- Add better checks for dh derive operations in FIPS mode.

[3.53.1-3]
- Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
- Adjust for update-crypto-policies packaging change (#1848649)
- Fix compilation with -Werror=strict-prototypes (#1843417)

[3.53.1-2]
- Fix regression in MD5 disablement (#1849938)
- Include rsa_pkcs1_* in signature_algorithms extension (#1847945)

[3.53.1-1]
- Update to NSS 3.53.1

[3.53.0-1]
- Update to NSS 3.53

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 8 nspr 0:4.25.0-2.el8_2
Oracle Linux · 8 nspr-devel 0:4.25.0-2.el8_2
Oracle Linux · 8 nss 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-devel 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-softokn 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-softokn-devel 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-softokn-freebl 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-softokn-freebl-devel 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-sysinit 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-tools 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-util 0:3.53.1-11.el8_2
Oracle Linux · 8 nss-util-devel 0:3.53.1-11.el8_2

Vulnerabilities 4