OVMSA-2015-0145

OVMSA-2015-0145 - nss, nss-util, and nspr security update

Type:	SECURITY
Severity:	CRITICAL
Release Date:	2015-11-05

Description

nspr
[4.10.8-2]
- Resolves: Bug 1269360 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption

nss
[3.19.1-5.0.1]
- Added nss-vendor.patch to change vendor

[3.19.1-5]
- Rebuild against updated NSPR

[3.19.1-4]
- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450

nss-util
[3.19.1-2]
- Resolves: Bug 1269355 - CVE-2015-7182 CVE-2015-7181

Related CVEs

CVE-2015-7181

CVE-2015-7182

CVE-2015-7183

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle VM 3.3 (x86_64)	nspr-4.10.8-2.el6_7.src.rpm	95a490e760a8b217593547e216f30c0b	OVMBA-2019-0058
	nss-3.19.1-5.0.1.el6_7.src.rpm	69083bf2e4aaf632361bad709475ea80	OVMBA-2019-0058
	nss-util-3.19.1-2.el6_7.src.rpm	759cfbe2cee48134edf76f900e993ca6	OVMBA-2019-0058
	nspr-4.10.8-2.el6_7.x86_64.rpm	1711b3d5a4e8916658bd29bc0b0e39ec	OVMBA-2019-0058
	nss-3.19.1-5.0.1.el6_7.x86_64.rpm	86817c4200a5e83011090582266cf1d8	OVMBA-2019-0058
	nss-sysinit-3.19.1-5.0.1.el6_7.x86_64.rpm	4ab9e86bba62a12b920a9945609b763b	OVMBA-2019-0058
	nss-tools-3.19.1-5.0.1.el6_7.x86_64.rpm	73ada0af257180313188896cbf95659d	OVMBA-2019-0058
	nss-util-3.19.1-2.el6_7.x86_64.rpm	763d350496b2be99743957011bd26922	OVMBA-2019-0058
Oracle VM 3.4 (x86_64)	nspr-4.10.8-2.el6_7.src.rpm	95a490e760a8b217593547e216f30c0b	OVMBA-2019-0058
	nss-util-3.19.1-2.el6_7.src.rpm	759cfbe2cee48134edf76f900e993ca6	OVMBA-2019-0058
	nspr-4.10.8-2.el6_7.x86_64.rpm	1711b3d5a4e8916658bd29bc0b0e39ec	OVMBA-2019-0058
	nss-util-3.19.1-2.el6_7.x86_64.rpm	763d350496b2be99743957011bd26922	OVMBA-2019-0058

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team