ELSA-2015-1664

ELSA-2015-1664 - nss security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2015-08-24

Description

[3.19.1-1]
- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase

[3.18.0-7]
- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)

Related CVEs

CVE-2015-2721

CVE-2015-2730

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	nss-3.19.1-1.el5_11.src.rpm	984dbc4ab519109f7e7d387da155f125	ELSA-2017-1101
	nss-3.19.1-1.el5_11.i386.rpm	d8e5a53b0d57d2c074fd6bc1835625a4	ELSA-2017-1101
	nss-devel-3.19.1-1.el5_11.i386.rpm	eaebfe3853094627c77c1dd80080f27b	ELSA-2017-1101
	nss-pkcs11-devel-3.19.1-1.el5_11.i386.rpm	3c1def32fb115391fd359e3375eb126b	ELSA-2017-1101
	nss-tools-3.19.1-1.el5_11.i386.rpm	d4f7af354ea5b59fea87d5147b954048	ELSA-2017-1101
Oracle Linux 5 (ia64)	nss-3.19.1-1.el5_11.src.rpm	984dbc4ab519109f7e7d387da155f125	ELSA-2017-1101
	nss-3.19.1-1.el5_11.i386.rpm	d8e5a53b0d57d2c074fd6bc1835625a4	ELSA-2017-1101
	nss-3.19.1-1.el5_11.ia64.rpm	758502e72061a53c15ff7e046e98759d	ELSA-2017-1101
	nss-devel-3.19.1-1.el5_11.ia64.rpm	9aa3231433c8705346fbe906335daf1c	ELSA-2017-1101
	nss-pkcs11-devel-3.19.1-1.el5_11.ia64.rpm	fd1eb37bc8a62078c7671b92555c345a	ELSA-2017-1101
	nss-tools-3.19.1-1.el5_11.ia64.rpm	bd2d11bee846f6a4fca6ee2743f06a4e	ELSA-2017-1101
Oracle Linux 5 (x86_64)	nss-3.19.1-1.el5_11.src.rpm	984dbc4ab519109f7e7d387da155f125	ELSA-2017-1101
	nss-3.19.1-1.el5_11.i386.rpm	d8e5a53b0d57d2c074fd6bc1835625a4	ELSA-2017-1101
	nss-3.19.1-1.el5_11.x86_64.rpm	1b2253e2d19a36634d532e88584f17af	ELSA-2017-1101
	nss-devel-3.19.1-1.el5_11.i386.rpm	eaebfe3853094627c77c1dd80080f27b	ELSA-2017-1101
	nss-devel-3.19.1-1.el5_11.x86_64.rpm	ade56a25b7673ac3f7259278c33efdab	ELSA-2017-1101
	nss-pkcs11-devel-3.19.1-1.el5_11.i386.rpm	3c1def32fb115391fd359e3375eb126b	ELSA-2017-1101
	nss-pkcs11-devel-3.19.1-1.el5_11.x86_64.rpm	b5824b8ba75a6aac9e6299f732d3fa42	ELSA-2017-1101
	nss-tools-3.19.1-1.el5_11.x86_64.rpm	ee185c118c60833d6f1926c51b64a98d	ELSA-2017-1101

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team