ELSA-2019-4190

ELSA-2019-4190 - nss, nss-softokn, nss-util security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-12-11

Description

nss
[3.44.0-7]
- Increase timeout on ssl_gtest so that slow platforms can complete when
running on a busy system.

[3.44.0-6]
- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)

[3.44.0-5]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775910)

nss-softokn
[3.44.0-8.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814],
[Orabug: 26617879], [Orabug: 26617849]

[3.44.0-8]
- Fix segfault on empty or malformed ecdh keys (#1777712)

[3.44.0-7]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)

[3.44.0-6]
- Fix fipstest to use the standard mechanism for TLS 1.2 PRF

nss-util
[3.44.0-4]
- Fix segfault on empty or malformed ecdh keys (#1777712)

Related CVEs

CVE-2019-11729

CVE-2019-11745

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	nss-3.44.0-7.el7_7.src.rpm	de68c08390c0469ae32d8dcaef032752	ELSA-2021-1384
	nss-softokn-3.44.0-8.0.1.el7_7.src.rpm	e0e393fcb64b42e42121fef028ea0aa9	ELSA-2020-4076
	nss-util-3.44.0-4.el7_7.src.rpm	44e4f20dd77e9bd8fccca61bd089422d	ELSA-2020-4076
	nss-3.44.0-7.el7_7.aarch64.rpm	4d7e504f55f5f2b64f66a44e4b08a8e9	ELSA-2021-1384
	nss-devel-3.44.0-7.el7_7.aarch64.rpm	f20f28cf274c74d39b6c7626a33fb240	ELSA-2021-1384
	nss-pkcs11-devel-3.44.0-7.el7_7.aarch64.rpm	1b2c9cf73103ee13e6e7a0615b8ffa97	ELSA-2021-1384
	nss-softokn-3.44.0-8.0.1.el7_7.aarch64.rpm	da8c3148061cc4b50f8dff587350baf6	ELSA-2020-4076
	nss-softokn-devel-3.44.0-8.0.1.el7_7.aarch64.rpm	c73fb84e6af09edcc4ce502b44f09af0	ELSA-2020-4076
	nss-softokn-freebl-3.44.0-8.0.1.el7_7.aarch64.rpm	09e8e2cc3015ab52460e4aad41a9c6cd	ELSA-2020-4076
	nss-softokn-freebl-devel-3.44.0-8.0.1.el7_7.aarch64.rpm	08074a09f0c41a3621a21a780db7cf39	ELSA-2020-4076
	nss-sysinit-3.44.0-7.el7_7.aarch64.rpm	dc20d159934428100adf6c77121a097d	ELSA-2021-1384
	nss-tools-3.44.0-7.el7_7.aarch64.rpm	679c9e8d36492c0afc716158a3b75b56	ELSA-2021-1384
	nss-util-3.44.0-4.el7_7.aarch64.rpm	ef9240085f0239cf96a410adcfbe6855	ELSA-2020-4076
	nss-util-devel-3.44.0-4.el7_7.aarch64.rpm	955eceb6d385501f92cb8fdd1e9fae9d	ELSA-2020-4076
Oracle Linux 7 (x86_64)	nss-3.44.0-7.el7_7.src.rpm	de68c08390c0469ae32d8dcaef032752	ELSA-2021-1384
	nss-softokn-3.44.0-8.0.1.el7_7.src.rpm	e0e393fcb64b42e42121fef028ea0aa9	ELSA-2020-4076
	nss-util-3.44.0-4.el7_7.src.rpm	44e4f20dd77e9bd8fccca61bd089422d	ELSA-2020-4076
	nss-3.44.0-7.el7_7.i686.rpm	2f802a1502dbf31a921cf844b1e52a9f	ELSA-2021-1384
	nss-3.44.0-7.el7_7.x86_64.rpm	c93ea9d13f2caa97bbe9b483da744c3a	ELSA-2021-1384
	nss-devel-3.44.0-7.el7_7.i686.rpm	a91cf8fd79f57805195a93cb87439d99	ELSA-2021-1384
	nss-devel-3.44.0-7.el7_7.x86_64.rpm	df6cc5750f4e7540bab90421245dec7f	ELSA-2021-1384
	nss-pkcs11-devel-3.44.0-7.el7_7.i686.rpm	e0f5e5dd610b3b8f5968c9136a3ee56e	ELSA-2021-1384
	nss-pkcs11-devel-3.44.0-7.el7_7.x86_64.rpm	4dc6defd9f0b5910bd5cf7c83a5c524f	ELSA-2021-1384
	nss-softokn-3.44.0-8.0.1.el7_7.i686.rpm	23ec2c33579190c9ca0ae177013dedf9	ELSA-2020-4076
	nss-softokn-3.44.0-8.0.1.el7_7.x86_64.rpm	a9c8d88b795a2dd74eb2eec100285431	ELSA-2020-4076
	nss-softokn-devel-3.44.0-8.0.1.el7_7.i686.rpm	7416ee85936f30d465fe32bf849137da	ELSA-2020-4076
	nss-softokn-devel-3.44.0-8.0.1.el7_7.x86_64.rpm	c2dd1b06991e62740ffe84faf4f4bcb0	ELSA-2020-4076
	nss-softokn-freebl-3.44.0-8.0.1.el7_7.i686.rpm	8362dfb655532b70e5dec3dd7daddd20	ELSA-2020-4076
	nss-softokn-freebl-3.44.0-8.0.1.el7_7.x86_64.rpm	7750e0cbd0a673b54fcce91a84acbc3a	ELSA-2020-4076
	nss-softokn-freebl-devel-3.44.0-8.0.1.el7_7.i686.rpm	52d6974749c186c4d37f8d93c01ee077	ELSA-2020-4076
	nss-softokn-freebl-devel-3.44.0-8.0.1.el7_7.x86_64.rpm	76bd27e960c0132c95973c4245cc53d6	ELSA-2020-4076
	nss-sysinit-3.44.0-7.el7_7.x86_64.rpm	6a9d634c934fcba438eeab9ae10cb408	ELSA-2021-1384
	nss-tools-3.44.0-7.el7_7.x86_64.rpm	1fbd8c01f3e5f6fb33273c0ee0fbabec	ELSA-2021-1384
	nss-util-3.44.0-4.el7_7.i686.rpm	681c82b1206504b8410ac3fa101a44db	ELSA-2020-4076
	nss-util-3.44.0-4.el7_7.x86_64.rpm	ef6d5c7fcb753b027ff4c65c664fdb17	ELSA-2020-4076
	nss-util-devel-3.44.0-4.el7_7.i686.rpm	06c7abcd14208a4d9e2ad64fff526c72	ELSA-2020-4076
	nss-util-devel-3.44.0-4.el7_7.x86_64.rpm	7306302bed8f06059ca50ce7e86a2a17	ELSA-2020-4076

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team