ELSA-2015-1664

ELSA-2015-1664 - nss security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2015-08-24

Description

[3.19.1-1]
- Rebase nss to 3.19.1
- Pick up upstream fix for client auth. regression caused by 3.19.1
- Revert upstream change to minimum key sizes
- Remove patches that rendered obsolote by the rebase
- Update existing patches on account of the rebase

[3.18.0-7]
- Pick up upstream patch from nss-3.19.1
- Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
- Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)

Related CVEs

CVE-2015-2730

CVE-2015-2721

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	nss-3.19.1-1.el5_11.src.rpm	fbca5c5ed199c8959cf7e4ebda0c4222cfa8f851d0f23a1f7ad96c1ece664537	ELSA-2017-1101	ol5_i386_latest
	nss-3.19.1-1.el5_11.src.rpm	fbca5c5ed199c8959cf7e4ebda0c4222cfa8f851d0f23a1f7ad96c1ece664537	ELSA-2017-1101	ol5_u11_i386_patch
	nss-3.19.1-1.el5_11.i386.rpm	2f7794c533742086b13c36d5fad96d048e4883695b386a5fa51c549cbf8d9290	ELSA-2017-1101	ol5_i386_latest
	nss-3.19.1-1.el5_11.i386.rpm	2f7794c533742086b13c36d5fad96d048e4883695b386a5fa51c549cbf8d9290	ELSA-2017-1101	ol5_u11_i386_patch
	nss-devel-3.19.1-1.el5_11.i386.rpm	db891baf0b378a92fa35cdb2a2666e246db4001eeab40ed6638f55c3dbdcba82	ELSA-2017-1101	ol5_i386_latest
	nss-devel-3.19.1-1.el5_11.i386.rpm	db891baf0b378a92fa35cdb2a2666e246db4001eeab40ed6638f55c3dbdcba82	ELSA-2017-1101	ol5_u11_i386_patch
	nss-pkcs11-devel-3.19.1-1.el5_11.i386.rpm	8d1fca9393197ab525ba530ed372c99fefa57bdcba3aa13997c3877cec1cf8e4	ELSA-2017-1101	ol5_i386_latest
	nss-pkcs11-devel-3.19.1-1.el5_11.i386.rpm	8d1fca9393197ab525ba530ed372c99fefa57bdcba3aa13997c3877cec1cf8e4	ELSA-2017-1101	ol5_u11_i386_patch
	nss-tools-3.19.1-1.el5_11.i386.rpm	26d4f924ca479f0c6dc9712d3be19824ad906a64d1ab96c02ae07960a9ffd923	ELSA-2017-1101	ol5_i386_latest
	nss-tools-3.19.1-1.el5_11.i386.rpm	26d4f924ca479f0c6dc9712d3be19824ad906a64d1ab96c02ae07960a9ffd923	ELSA-2017-1101	ol5_u11_i386_patch
Oracle Linux 5 (ia64)	nss-3.19.1-1.el5_11.src.rpm	fbca5c5ed199c8959cf7e4ebda0c4222cfa8f851d0f23a1f7ad96c1ece664537	ELSA-2017-1101	ol5_ia64_latest
	nss-3.19.1-1.el5_11.src.rpm	fbca5c5ed199c8959cf7e4ebda0c4222cfa8f851d0f23a1f7ad96c1ece664537	ELSA-2017-1101	ol5_u11_ia64_patch
	nss-3.19.1-1.el5_11.i386.rpm	2f7794c533742086b13c36d5fad96d048e4883695b386a5fa51c549cbf8d9290	ELSA-2017-1101	ol5_ia64_latest
	nss-3.19.1-1.el5_11.i386.rpm	2f7794c533742086b13c36d5fad96d048e4883695b386a5fa51c549cbf8d9290	ELSA-2017-1101	ol5_u11_ia64_patch
	nss-3.19.1-1.el5_11.ia64.rpm	e6ee9c794855e79cf46b3ca54e0a9a4db57ded5625602f05cef7c654323e6c7a	ELSA-2017-1101	ol5_ia64_latest
	nss-3.19.1-1.el5_11.ia64.rpm	e6ee9c794855e79cf46b3ca54e0a9a4db57ded5625602f05cef7c654323e6c7a	ELSA-2017-1101	ol5_u11_ia64_patch
	nss-devel-3.19.1-1.el5_11.ia64.rpm	61b2c82707da35b581b392447056ff586ce8997c376d82cfc599d94216f842d8	ELSA-2017-1101	ol5_ia64_latest
	nss-devel-3.19.1-1.el5_11.ia64.rpm	61b2c82707da35b581b392447056ff586ce8997c376d82cfc599d94216f842d8	ELSA-2017-1101	ol5_u11_ia64_patch
	nss-pkcs11-devel-3.19.1-1.el5_11.ia64.rpm	a3f93ec7750fe846c9074d3a2ab1fb37e9c37821c09fa8b0ecaa4b266a445c0a	ELSA-2017-1101	ol5_ia64_latest
	nss-pkcs11-devel-3.19.1-1.el5_11.ia64.rpm	a3f93ec7750fe846c9074d3a2ab1fb37e9c37821c09fa8b0ecaa4b266a445c0a	ELSA-2017-1101	ol5_u11_ia64_patch
	nss-tools-3.19.1-1.el5_11.ia64.rpm	af49c989e54a130e810580a3b5601d84c219a61213e64c15608032823c349f0e	ELSA-2017-1101	ol5_ia64_latest
	nss-tools-3.19.1-1.el5_11.ia64.rpm	af49c989e54a130e810580a3b5601d84c219a61213e64c15608032823c349f0e	ELSA-2017-1101	ol5_u11_ia64_patch
Oracle Linux 5 (x86_64)	nss-3.19.1-1.el5_11.src.rpm	fbca5c5ed199c8959cf7e4ebda0c4222cfa8f851d0f23a1f7ad96c1ece664537	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-3.19.1-1.el5_11.src.rpm	fbca5c5ed199c8959cf7e4ebda0c4222cfa8f851d0f23a1f7ad96c1ece664537	ELSA-2017-1101	ol5_x86_64_latest
	nss-3.19.1-1.el5_11.i386.rpm	2f7794c533742086b13c36d5fad96d048e4883695b386a5fa51c549cbf8d9290	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-3.19.1-1.el5_11.i386.rpm	2f7794c533742086b13c36d5fad96d048e4883695b386a5fa51c549cbf8d9290	ELSA-2017-1101	ol5_x86_64_latest
	nss-3.19.1-1.el5_11.x86_64.rpm	0bfdd0ccd3d8184583e30fef28e6596009555dee3e3dd4970687f1daa46712e9	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-3.19.1-1.el5_11.x86_64.rpm	0bfdd0ccd3d8184583e30fef28e6596009555dee3e3dd4970687f1daa46712e9	ELSA-2017-1101	ol5_x86_64_latest
	nss-devel-3.19.1-1.el5_11.i386.rpm	db891baf0b378a92fa35cdb2a2666e246db4001eeab40ed6638f55c3dbdcba82	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-devel-3.19.1-1.el5_11.i386.rpm	db891baf0b378a92fa35cdb2a2666e246db4001eeab40ed6638f55c3dbdcba82	ELSA-2017-1101	ol5_x86_64_latest
	nss-devel-3.19.1-1.el5_11.x86_64.rpm	bc57e65a52735f110afbf5f8432630080d53be2fe4f478be1fd6bdf47d27940b	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-devel-3.19.1-1.el5_11.x86_64.rpm	bc57e65a52735f110afbf5f8432630080d53be2fe4f478be1fd6bdf47d27940b	ELSA-2017-1101	ol5_x86_64_latest
	nss-pkcs11-devel-3.19.1-1.el5_11.i386.rpm	8d1fca9393197ab525ba530ed372c99fefa57bdcba3aa13997c3877cec1cf8e4	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-pkcs11-devel-3.19.1-1.el5_11.i386.rpm	8d1fca9393197ab525ba530ed372c99fefa57bdcba3aa13997c3877cec1cf8e4	ELSA-2017-1101	ol5_x86_64_latest
	nss-pkcs11-devel-3.19.1-1.el5_11.x86_64.rpm	8af54bd38824ac1192d35f9932bb748ee6f813c28d26e310d1c02eb8483e4f05	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-pkcs11-devel-3.19.1-1.el5_11.x86_64.rpm	8af54bd38824ac1192d35f9932bb748ee6f813c28d26e310d1c02eb8483e4f05	ELSA-2017-1101	ol5_x86_64_latest
	nss-tools-3.19.1-1.el5_11.x86_64.rpm	0a2b9fa4678e3fa5cb46e7628d97b6b4a44509a075c33a31ef166768d9056099	ELSA-2017-1101	ol5_u11_x86_64_patch
	nss-tools-3.19.1-1.el5_11.x86_64.rpm	0a2b9fa4678e3fa5cb46e7628d97b6b4a44509a075c33a31ef166768d9056099	ELSA-2017-1101	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team