ELSA-2012-0973

ELSA-2012-0973 - nss, nss-util, and nspr security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2012-06-27

Description

nspr
[4.9-1]
- Resolves: rhbz#799193 - Update to 4.9

nss
[3.13.3-6.0.1.el6]
- Added nss-vendor.patch to change vendor
- Use blank image instead of clean.gif in tar ball

[3.13.3-6]
- Resolves: #rhbz#805232 PEM module may attempt to free uninitialized pointer

[3.13.3-5]
- Resolves: rhbz#717913 - [PEM] various flaws detected by Coverity
- Require nss-util 3.13.3

[3.13.3-4]
- Resolves: rhbz#772628 nss_Init leaks memory

[3.13.3-3]
- Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
- Use completed patch per code review

[3.13.3-2]
- Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
- Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV

[3.13.3-1]
- Update to 3.13.3
- Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
- Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes

nss-util
[3.13.3-2]
- Resolves: rhbz#799192 - Update to 3.13.3
- Update minimum nspr version for Requires and BuildRequires to 4.9
- Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2

[3.13.1-5]
- Resolves: rhbz#799192 - Update to 3.13.3

Related CVEs

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	nspr-4.9-1.el6.src.rpm	c6e95f62b4e7964c7542c538a3514e14	ELEA-2019-3280
	nss-3.13.3-6.0.1.el6.src.rpm	9f647710e54eade1fe091506f05c50be	ELEA-2019-3280
	nss-util-3.13.3-2.el6.src.rpm	7f8b832dfa7dfb6fc316fa0cebb81c3f	ELEA-2019-3280
	nspr-4.9-1.el6.i686.rpm	4143a0b09e7e95a41ef14066d4afb256	ELEA-2019-3280
	nspr-devel-4.9-1.el6.i686.rpm	a3216af84aeef50454c3e514e5caf723	ELEA-2019-3280
	nss-3.13.3-6.0.1.el6.i686.rpm	e9c6282cbd294e68e57ee9e262f8bb48	ELEA-2019-3280
	nss-devel-3.13.3-6.0.1.el6.i686.rpm	05d2ebdc9c2f597b4a045a1decf0307e	ELEA-2019-3280
	nss-pkcs11-devel-3.13.3-6.0.1.el6.i686.rpm	6c33a112d24de666ffdebd13948b5755	ELEA-2019-3280
	nss-sysinit-3.13.3-6.0.1.el6.i686.rpm	c721171b0d723401a15cff9e20b70d5e	ELEA-2019-3280
	nss-tools-3.13.3-6.0.1.el6.i686.rpm	8d9a7a5cc0c52a3bf0d47abba6e7ec02	ELEA-2019-3280
	nss-util-3.13.3-2.el6.i686.rpm	c4b510c96207e605c734dace93325616	ELEA-2019-3280
	nss-util-devel-3.13.3-2.el6.i686.rpm	45b1bdfa7e5a7daada5414dd7825b7b1	ELEA-2019-3280
Oracle Linux 6 (x86_64)	nspr-4.9-1.el6.src.rpm	c6e95f62b4e7964c7542c538a3514e14	ELEA-2019-3280
	nss-3.13.3-6.0.1.el6.src.rpm	9f647710e54eade1fe091506f05c50be	ELEA-2019-3280
	nss-util-3.13.3-2.el6.src.rpm	7f8b832dfa7dfb6fc316fa0cebb81c3f	ELEA-2019-3280
	nspr-4.9-1.el6.i686.rpm	4143a0b09e7e95a41ef14066d4afb256	ELEA-2019-3280
	nspr-4.9-1.el6.x86_64.rpm	a330e7179956ad906bda58b060d71597	ELEA-2019-3280
	nspr-devel-4.9-1.el6.i686.rpm	a3216af84aeef50454c3e514e5caf723	ELEA-2019-3280
	nspr-devel-4.9-1.el6.x86_64.rpm	704612be500cf49ebdbcba4cd6cbed95	ELEA-2019-3280
	nss-3.13.3-6.0.1.el6.i686.rpm	e9c6282cbd294e68e57ee9e262f8bb48	ELEA-2019-3280
	nss-3.13.3-6.0.1.el6.x86_64.rpm	fda13126146fb7c0349dbc05e317d65b	ELEA-2019-3280
	nss-devel-3.13.3-6.0.1.el6.i686.rpm	05d2ebdc9c2f597b4a045a1decf0307e	ELEA-2019-3280
	nss-devel-3.13.3-6.0.1.el6.x86_64.rpm	896d480d5d5bc4fa9289e68eb34e7cc3	ELEA-2019-3280
	nss-pkcs11-devel-3.13.3-6.0.1.el6.i686.rpm	6c33a112d24de666ffdebd13948b5755	ELEA-2019-3280
	nss-pkcs11-devel-3.13.3-6.0.1.el6.x86_64.rpm	0d324ebeb98a641f9c477cc913cafc59	ELEA-2019-3280
	nss-sysinit-3.13.3-6.0.1.el6.x86_64.rpm	4c8bcf2cf5409e86e3c416a8f006cc3a	ELEA-2019-3280
	nss-tools-3.13.3-6.0.1.el6.x86_64.rpm	0c788b8dd195093532006746489c46a1	ELEA-2019-3280
	nss-util-3.13.3-2.el6.i686.rpm	c4b510c96207e605c734dace93325616	ELEA-2019-3280
	nss-util-3.13.3-2.el6.x86_64.rpm	5eb9db73156f26bba8404b807ffd6bce	ELEA-2019-3280
	nss-util-devel-3.13.3-2.el6.i686.rpm	45b1bdfa7e5a7daada5414dd7825b7b1	ELEA-2019-3280
	nss-util-devel-3.13.3-2.el6.x86_64.rpm	f77cb1a6b6508f0efc6fc0d15593e4d5	ELEA-2019-3280

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team