ELSA-2013-1829

ELSA-2013-1829 - nss, nspr, and nss-util security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2013-12-12

Description

nspr
[4.10.0-2]
- Rebase to nspr-4.10.2
- Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)

nss
[3.15.3-2.0.1]
- Added nss-vendor.patch to change vendor

[3.15.3-2]
- Enable patch with fix for deadlock in trust domain lock and object lock
- Resolves: Bug 1036477 - deadlock in trust domain lock and object lock
- Disable hw gcm on rhel-5 based build environments where OS lacks support
- Rollback changes to build nss without softokn until Bug 689919 is approved
- Cipher suite was run as part of the nss-softokn build

[3.15.3-1]
- Update to NSS_3_15_3_RTM
- Resolves: Bug 1032470 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741

nss-util
[3.15.3-1]
- Update to NSS_3_15_3_RTM
- Resolves: rhbz#1032470 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741

Related CVEs

CVE-2013-1739

CVE-2013-1741

CVE-2013-5605

CVE-2013-5606

CVE-2013-5607

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	nspr-4.10.2-1.el6_5.src.rpm	93bc34ded06b13114be2b53dbb86ce0d	ELEA-2019-3280
	nss-3.15.3-2.0.1.el6_5.src.rpm	1ca00dff7623fb87e99094da62ede45c	ELEA-2019-3280
	nss-util-3.15.3-1.el6_5.src.rpm	2a32b7b16def28c9b0803305defe7e78	ELEA-2019-3280
	nspr-4.10.2-1.el6_5.i686.rpm	33717f8fe269e11c276e71604309d520	ELEA-2019-3280
	nspr-devel-4.10.2-1.el6_5.i686.rpm	6005e5a21cb74fd0ca22e845669136a0	ELEA-2019-3280
	nss-3.15.3-2.0.1.el6_5.i686.rpm	a4259116bcdde3bca677ff363e10d5d6	ELEA-2019-3280
	nss-devel-3.15.3-2.0.1.el6_5.i686.rpm	d063d7581c16641d102b5754f00a5294	ELEA-2019-3280
	nss-pkcs11-devel-3.15.3-2.0.1.el6_5.i686.rpm	84d1eb24672f215819404c4a75a441cc	ELEA-2019-3280
	nss-sysinit-3.15.3-2.0.1.el6_5.i686.rpm	a54228793c31af37452cc09a0df140a3	ELEA-2019-3280
	nss-tools-3.15.3-2.0.1.el6_5.i686.rpm	d407babea34afb19af2ad6185f2f5c58	ELEA-2019-3280
	nss-util-3.15.3-1.el6_5.i686.rpm	bd603ab5d6165b4b4da37e56814b6ec4	ELEA-2019-3280
	nss-util-devel-3.15.3-1.el6_5.i686.rpm	bd5df03269b0a671e34c35c9f901c159	ELEA-2019-3280
Oracle Linux 6 (x86_64)	nspr-4.10.2-1.el6_5.src.rpm	93bc34ded06b13114be2b53dbb86ce0d	ELEA-2019-3280
	nss-3.15.3-2.0.1.el6_5.src.rpm	1ca00dff7623fb87e99094da62ede45c	ELEA-2019-3280
	nss-util-3.15.3-1.el6_5.src.rpm	2a32b7b16def28c9b0803305defe7e78	ELEA-2019-3280
	nspr-4.10.2-1.el6_5.i686.rpm	33717f8fe269e11c276e71604309d520	ELEA-2019-3280
	nspr-4.10.2-1.el6_5.x86_64.rpm	19aadbe06b88f33afc6a67b34395dd65	ELEA-2019-3280
	nspr-devel-4.10.2-1.el6_5.i686.rpm	6005e5a21cb74fd0ca22e845669136a0	ELEA-2019-3280
	nspr-devel-4.10.2-1.el6_5.x86_64.rpm	80fb157f0fadfc12ed3d3462cca6fc56	ELEA-2019-3280
	nss-3.15.3-2.0.1.el6_5.i686.rpm	a4259116bcdde3bca677ff363e10d5d6	ELEA-2019-3280
	nss-3.15.3-2.0.1.el6_5.x86_64.rpm	275c945c1ad9f4e5bb3e47543542dac6	ELEA-2019-3280
	nss-devel-3.15.3-2.0.1.el6_5.i686.rpm	d063d7581c16641d102b5754f00a5294	ELEA-2019-3280
	nss-devel-3.15.3-2.0.1.el6_5.x86_64.rpm	369ae11b2e54c213ff5cb288c1be7b40	ELEA-2019-3280
	nss-pkcs11-devel-3.15.3-2.0.1.el6_5.i686.rpm	84d1eb24672f215819404c4a75a441cc	ELEA-2019-3280
	nss-pkcs11-devel-3.15.3-2.0.1.el6_5.x86_64.rpm	be5ba22171d5fc66061466c78b25edb7	ELEA-2019-3280
	nss-sysinit-3.15.3-2.0.1.el6_5.x86_64.rpm	157e6e0017088a99f16e473a7904ebf6	ELEA-2019-3280
	nss-tools-3.15.3-2.0.1.el6_5.x86_64.rpm	1ccebf6517c51b516eb8bf793bdbf5f0	ELEA-2019-3280
	nss-util-3.15.3-1.el6_5.i686.rpm	bd603ab5d6165b4b4da37e56814b6ec4	ELEA-2019-3280
	nss-util-3.15.3-1.el6_5.x86_64.rpm	8719ae7067121634d182dd4d32cde8b9	ELEA-2019-3280
	nss-util-devel-3.15.3-1.el6_5.i686.rpm	bd5df03269b0a671e34c35c9f901c159	ELEA-2019-3280
	nss-util-devel-3.15.3-1.el6_5.x86_64.rpm	b85e4d3777465d97adb83f5905801c0a	ELEA-2019-3280

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team