Summary
[3.90.0-6_fips]
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35862190]
- Update FIPS module name for Oracle Linux [Orabug: 35862190]
[3.90.0-6]
- Fix ecc DER wrapping.
[3.90.0-5]
- Pick up validated constant time implementations of p256, p384, and p521
from upsream
- More Fips indicator changes
[3.90.0-4]
- FIPS review changes
- add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
- update the indicators for this release
- allow hashing of longer than int32 values in a single PKCS #11 call.
[3.90.0-3.3]
- Fix expired certs in tests
- Fix CVE-2023-5388
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | nspr | 10:4.35.0-6.el9_3_fips |
| Oracle Linux · 9 | nspr-devel | 10:4.35.0-6.el9_3_fips |
| Oracle Linux · 9 | nss | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-devel | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-pkcs11-devel | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-softokn | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-softokn-devel | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-softokn-freebl | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-softokn-freebl-devel | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-sysinit | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-tools | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-util | 10:3.90.0-6.el9_3_fips |
| Oracle Linux · 9 | nss-util-devel | 10:3.90.0-6.el9_3_fips |
Vulnerabilities 1
-
Unscored —
Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially al…