Summary
[3.79.0-17]
- fix consistency return errors. We shouldn't lock the FIPS
token if the application asked for invalid DH parameters on
on keygen.
[3.79.0-16]
- Add check for RSA PSS Salt required by FIPS
- Update fips_algorithms.sh according to the review.
[3.79.0-15]
- Fix CVE-2023-0767
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | nspr | 0:4.34.0-17.el9_1 |
| Oracle Linux · 9 | nspr-devel | 0:4.34.0-17.el9_1 |
| Oracle Linux · 9 | nss | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-devel | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-softokn | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-softokn-devel | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-softokn-freebl | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-softokn-freebl-devel | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-sysinit | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-tools | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-util | 0:3.79.0-17.el9_1 |
| Oracle Linux · 9 | nss-util-devel | 0:3.79.0-17.el9_1 |
Vulnerabilities 1
-
High 8.8
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 1…