Summary
[3.90.0-6]
- Fix ecc DER wrapping.
[3.90.0-5]
- Pick up validated constant time implementations of p256, p384, and p521
from upsream
- More Fips indicator changes
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | nss | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-devel | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-softokn | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-softokn-devel | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-softokn-freebl | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-softokn-freebl-devel | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-sysinit | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-tools | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-util | 0:3.90.0-6.el8_9 |
| Oracle Linux · 8 | nss-util-devel | 0:3.90.0-6.el8_9 |
Vulnerabilities 1
-
Unscored —
Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially al…