ELSA-2021-1384

ELSA-2021-1384 - nss security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2021-04-28

Description

[3.53.1-7]
- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto

[3.53.1-6]
- Update to CVE 2020-256423 TLS flood DOS attack patch.

[3.53.1-5]
- Fix CVE 2020-256423 TLS flood DOS Attack.

[3.53.1-4]
- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.

Related CVEs

CVE-2020-25648

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	nss-3.53.1-7.el7_9.src.rpm	ef362b3dff12b0e6ce63ff374a2d9810	-
	nss-3.53.1-7.el7_9.aarch64.rpm	b20225ace9f5e0a18dbba5f8cb8696e6	-
	nss-devel-3.53.1-7.el7_9.aarch64.rpm	03368e31e85f649ce561cdb16ce9d497	-
	nss-pkcs11-devel-3.53.1-7.el7_9.aarch64.rpm	bfb77eb95e6c315e93063d11ee65ae3c	-
	nss-sysinit-3.53.1-7.el7_9.aarch64.rpm	3a5e7502179ba89d1deb32284a913098	-
	nss-tools-3.53.1-7.el7_9.aarch64.rpm	3ab5ef3417f52c373d6b85bb55590adb	-
Oracle Linux 7 (x86_64)	nss-3.53.1-7.el7_9.src.rpm	ef362b3dff12b0e6ce63ff374a2d9810	-
	nss-3.53.1-7.el7_9.i686.rpm	bffc398cfa0f931e174df99a370c96b0	-
	nss-3.53.1-7.el7_9.x86_64.rpm	c3964c51903fb9d183933d6ab6efa397	-
	nss-devel-3.53.1-7.el7_9.i686.rpm	c93687326e46037d69aefebe13df81c0	-
	nss-devel-3.53.1-7.el7_9.x86_64.rpm	48f9ca34a09b107a800b03c4c57121be	-
	nss-pkcs11-devel-3.53.1-7.el7_9.i686.rpm	9ac8049032cd2a60375ffe24c7f5bfde	-
	nss-pkcs11-devel-3.53.1-7.el7_9.x86_64.rpm	bf80755e99867b372768a4214fb31c4b	-
	nss-sysinit-3.53.1-7.el7_9.x86_64.rpm	8e09b6f04674f3f409f2d3fc734b9c81	-
	nss-tools-3.53.1-7.el7_9.x86_64.rpm	cc29fc1724b01c017c01b9c486dc4a9e	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team