ELSA-2020-3280

ELSA-2020-3280 - nss and nspr security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-08-04

Description

nspr
[4.25.0-2]
- Rebuild

[4.25.0-1]
- Update to NSPR 4.25

nss
[3.53.1-11]
- Fix issue with upgradedb where upgradedb expects standard to
generate dbm databases, not sql databases (default in RHEL8)

[3.53.1-10]
- Disable dh timing test because it's unreliable on s390

[3.53.1-9]
- Explicitly enable upgradedb/sharedb test cycles

[3.53.1-8]
- Disable Delegated Credentials for TLS

[3.53.1-7]
- Fix attribute decryption issue where the private key components
integrity check on private attributes where not being checked.

[3.53.1-6]
- Update nss-rsa-pkcs1-sigalgs.patch to the upstream version

[3.53.1-5]
- Include required checks for dh and ecdh key generation in FIPS mode.

[3.53.1-4]
- Add better checks for dh derive operations in FIPS mode.

[3.53.1-3]
- Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
- Adjust for update-crypto-policies packaging change (#1848649)
- Fix compilation with -Werror=strict-prototypes (#1843417)

[3.53.1-2]
- Fix regression in MD5 disablement (#1849938)
- Include rsa_pkcs1_* in signature_algorithms extension (#1847945)

[3.53.1-1]
- Update to NSS 3.53.1

[3.53.0-1]
- Update to NSS 3.53

Related CVEs

CVE-2019-11756

CVE-2019-17006

CVE-2019-17023

CVE-2020-12402

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	nspr-4.25.0-2.el8_2.src.rpm	e293fa98e07f27edb676ed6a18391174	-
	nss-3.53.1-11.el8_2.src.rpm	2de248c2447248146a99754be5c69c50	-
	nspr-4.25.0-2.el8_2.aarch64.rpm	2daa5ed531ec8f6c18beafc618d83cd9	-
	nspr-devel-4.25.0-2.el8_2.aarch64.rpm	b8f0e942b92b59676d38bc054900f2af	-
	nss-3.53.1-11.el8_2.aarch64.rpm	b8a78f0e9bd1bb2149c042ae63452d61	-
	nss-devel-3.53.1-11.el8_2.aarch64.rpm	5c0d0849d2e76e0bce56d1f779e18694	-
	nss-softokn-3.53.1-11.el8_2.aarch64.rpm	a64f61932668474ebce16bc47490b301	-
	nss-softokn-devel-3.53.1-11.el8_2.aarch64.rpm	75600c234775f4e7d55e059617c24d3c	-
	nss-softokn-freebl-3.53.1-11.el8_2.aarch64.rpm	490a7b6a358bc2278cd8a2895ae73d94	-
	nss-softokn-freebl-devel-3.53.1-11.el8_2.aarch64.rpm	69aadde5611ed93e7628725a2abcf5a5	-
	nss-sysinit-3.53.1-11.el8_2.aarch64.rpm	d45f633bd35def7db1b516d84bd7f420	-
	nss-tools-3.53.1-11.el8_2.aarch64.rpm	709fd911861c32b33ba03ab369839e53	-
	nss-util-3.53.1-11.el8_2.aarch64.rpm	8f9bfc5df9518ff88c72b1c6b1a87811	-
	nss-util-devel-3.53.1-11.el8_2.aarch64.rpm	3837fd1f15bb2e08586f82ebb0a3beb5	-
Oracle Linux 8 (x86_64)	nspr-4.25.0-2.el8_2.src.rpm	e293fa98e07f27edb676ed6a18391174	-
	nss-3.53.1-11.el8_2.src.rpm	2de248c2447248146a99754be5c69c50	-
	nspr-4.25.0-2.el8_2.i686.rpm	1a9286cc00e80bc8077be7ca040d7586	-
	nspr-4.25.0-2.el8_2.x86_64.rpm	433a16c9ea396563fab0576bc748cfd3	-
	nspr-devel-4.25.0-2.el8_2.i686.rpm	3c177570b54d4c4e1ca94245ef424ee2	-
	nspr-devel-4.25.0-2.el8_2.x86_64.rpm	0413206cb7771b372ac28a2fbee3035c	-
	nss-3.53.1-11.el8_2.i686.rpm	be4aca3e198b10642db402b6f79c732c	-
	nss-3.53.1-11.el8_2.x86_64.rpm	9c1ad964a0721401a58febd371cafb27	-
	nss-devel-3.53.1-11.el8_2.i686.rpm	aaebcbe3d21f1b515270368bcf8e8de2	-
	nss-devel-3.53.1-11.el8_2.x86_64.rpm	80992f21c923aafc9176202f7c5237ae	-
	nss-softokn-3.53.1-11.el8_2.i686.rpm	579a20f4d6912cf9f9e712cc589d87d2	-
	nss-softokn-3.53.1-11.el8_2.x86_64.rpm	1a355e7ef2e4db9405bc44f747dc3ef4	-
	nss-softokn-devel-3.53.1-11.el8_2.i686.rpm	ecd306641987af42fae56834b5d22778	-
	nss-softokn-devel-3.53.1-11.el8_2.x86_64.rpm	1fbd703171e4eaa33ed8a07ddb1644c7	-
	nss-softokn-freebl-3.53.1-11.el8_2.i686.rpm	fae1ef829adcc0c5cf8cde4a2b828381	-
	nss-softokn-freebl-3.53.1-11.el8_2.x86_64.rpm	8b4efbead38f90fd75ea3e70dc5f6ecf	-
	nss-softokn-freebl-devel-3.53.1-11.el8_2.i686.rpm	614b5d06bdbad991f1eaa4d9c4d1b28a	-
	nss-softokn-freebl-devel-3.53.1-11.el8_2.x86_64.rpm	3fd6589ae759062ac4603301b5f205c6	-
	nss-sysinit-3.53.1-11.el8_2.x86_64.rpm	9ccd7f19fc3713af7e0727e059550522	-
	nss-tools-3.53.1-11.el8_2.x86_64.rpm	8a4f1245d4147d1be002ce2b53e21946	-
	nss-util-3.53.1-11.el8_2.i686.rpm	e7aaffa29bef08c257e0d60bcc0efd08	-
	nss-util-3.53.1-11.el8_2.x86_64.rpm	7b4d950a9187d27d27e3bdb78d7115b9	-
	nss-util-devel-3.53.1-11.el8_2.i686.rpm	c9ec515c4fc215a33d19ada424cbf600	-
	nss-util-devel-3.53.1-11.el8_2.x86_64.rpm	a22032c3c54c8db33b5a0786f4a67ef8	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team