ELSA-2018-2898

ELSA-2018-2898 - nss security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2018-10-09

Description

[3.36.0-9.0.1]
- Added nss-vendor.patch to change vendor
- Temporarily disable some tests until expired PayPalEE.cert is renewed

[3.36.0-9]
- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
mistake (the symbol was not exported from libnss)

Related CVEs

CVE-2018-12384

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	nss-3.36.0-9.0.1.el6_10.src.rpm	071fed9d0028d46982aa3e4e5667e850	ELEA-2019-3280
	nss-3.36.0-9.0.1.el6_10.i686.rpm	716531619c6f837582f4d063807fc0bd	ELEA-2019-3280
	nss-devel-3.36.0-9.0.1.el6_10.i686.rpm	808115fd85c7cbf52680833e63d950db	ELEA-2019-3280
	nss-pkcs11-devel-3.36.0-9.0.1.el6_10.i686.rpm	e01ffba242180c61639d4fe1713333d4	ELEA-2019-3280
	nss-sysinit-3.36.0-9.0.1.el6_10.i686.rpm	5b23e6190cb8aa45d2cea8ecce62eeb7	ELEA-2019-3280
	nss-tools-3.36.0-9.0.1.el6_10.i686.rpm	9de972d1e29cce1f8f429d5d6fe299c4	ELEA-2019-3280
Oracle Linux 6 (x86_64)	nss-3.36.0-9.0.1.el6_10.src.rpm	071fed9d0028d46982aa3e4e5667e850	ELEA-2019-3280
	nss-3.36.0-9.0.1.el6_10.i686.rpm	716531619c6f837582f4d063807fc0bd	ELEA-2019-3280
	nss-3.36.0-9.0.1.el6_10.x86_64.rpm	a390d0077caf2a7b79d29e37f2999933	ELEA-2019-3280
	nss-devel-3.36.0-9.0.1.el6_10.i686.rpm	808115fd85c7cbf52680833e63d950db	ELEA-2019-3280
	nss-devel-3.36.0-9.0.1.el6_10.x86_64.rpm	c76513323d9acf7b9ac198daa709b75f	ELEA-2019-3280
	nss-pkcs11-devel-3.36.0-9.0.1.el6_10.i686.rpm	e01ffba242180c61639d4fe1713333d4	ELEA-2019-3280
	nss-pkcs11-devel-3.36.0-9.0.1.el6_10.x86_64.rpm	602799a93e3af7ebb9d19568c36261a4	ELEA-2019-3280
	nss-sysinit-3.36.0-9.0.1.el6_10.x86_64.rpm	4468d01d73f28a66eb813d414a0e29e8	ELEA-2019-3280
	nss-tools-3.36.0-9.0.1.el6_10.x86_64.rpm	e60d7be8d54ec0dba08840a07f53dce4	ELEA-2019-3280

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team