ELSA-2018-2768

ELSA-2018-2768 - nss security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2018-09-25

Description

[3.36.0-7]
- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
mistake (the symbol was not exported from libnss)

[3.36.0-6]
- Exercise SSL tests which only run under non-FIPS setting

Related CVEs

CVE-2018-12384

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	nss-3.36.0-7.el7_5.src.rpm	02a2ad870b19aca9844435a684f07466	ELSA-2021-1384
	nss-3.36.0-7.el7_5.aarch64.rpm	45a11e559d916bfef6b448cf6344bcdc	ELSA-2021-1384
	nss-devel-3.36.0-7.el7_5.aarch64.rpm	6ae9065eb9103b8c12edbfb5fe0ac432	ELSA-2021-1384
	nss-pkcs11-devel-3.36.0-7.el7_5.aarch64.rpm	1d353af7ff119b8d2df4f142a988efde	ELSA-2021-1384
	nss-sysinit-3.36.0-7.el7_5.aarch64.rpm	c740ec7a44160b5ec99b70f09ff8f4c8	ELSA-2021-1384
	nss-tools-3.36.0-7.el7_5.aarch64.rpm	13d56a17ffbd7c894bd6f5e548eb470e	ELSA-2021-1384
Oracle Linux 7 (x86_64)	nss-3.36.0-7.el7_5.src.rpm	02a2ad870b19aca9844435a684f07466	ELSA-2021-1384
	nss-3.36.0-7.el7_5.i686.rpm	95782c7c883855410c516c61efae7201	ELSA-2021-1384
	nss-3.36.0-7.el7_5.x86_64.rpm	d266f1716a3ad7f6d54143d3d1d93703	ELSA-2021-1384
	nss-devel-3.36.0-7.el7_5.i686.rpm	b85716cb917e5afafb9a223409c456be	ELSA-2021-1384
	nss-devel-3.36.0-7.el7_5.x86_64.rpm	920ff4219b5c483534ac8b46634d5bb8	ELSA-2021-1384
	nss-pkcs11-devel-3.36.0-7.el7_5.i686.rpm	3ac167e1f6a1d7ae488ee3cf38fdc8ad	ELSA-2021-1384
	nss-pkcs11-devel-3.36.0-7.el7_5.x86_64.rpm	719f349986669999a2452a1ea5fb505d	ELSA-2021-1384
	nss-sysinit-3.36.0-7.el7_5.x86_64.rpm	a066aea088095080b2099d09b425cc84	ELSA-2021-1384
	nss-tools-3.36.0-7.el7_5.x86_64.rpm	39f5eeb1db4350b84f45b310b86c03a4	ELSA-2021-1384

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team