Summary
[3.53.1-7]
- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto
[3.53.1-6]
- Update to CVE 2020-256423 TLS flood DOS attack patch.
[3.53.1-5]
- Fix CVE 2020-256423 TLS flood DOS Attack.
[3.53.1-4]
- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | nss | 0:3.53.1-7.el7_9 |
| Oracle Linux · 7 | nss-devel | 0:3.53.1-7.el7_9 |
| Oracle Linux · 7 | nss-pkcs11-devel | 0:3.53.1-7.el7_9 |
| Oracle Linux · 7 | nss-sysinit | 0:3.53.1-7.el7_9 |
| Oracle Linux · 7 | nss-tools | 0:3.53.1-7.el7_9 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker …