OVMSA-2017-0109

OVMSA-2017-0109 - nss security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-05-30

Description

[3.28.4-3.0.1]
- Added nss-vendor.patch to change vendor
- Temporarily disable some tests until expired PayPalEE.cert is renewed

[3.28.4-3]
- Fix zero-length record treatment for stream ciphers and SSLv2

[3.28.4-2]
- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5

Related CVEs

CVE-2017-7502

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	nss-3.28.4-3.0.1.el6_9.src.rpm	4ef109dc4832816d8721494a32d0a35839584e4eada13ee0b710db7adb5c8372	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
	nss-3.28.4-3.0.1.el6_9.x86_64.rpm	2ea58b926e45d2dea34389523075681207e19c74c0fe3301ad4a9d833b7f42d5	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
	nss-sysinit-3.28.4-3.0.1.el6_9.x86_64.rpm	58038e3b8e9a88aadc5df7c0bd1ad384ad58e5f57f6fca398fdda1ff97566c75	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
	nss-tools-3.28.4-3.0.1.el6_9.x86_64.rpm	15f52b3967545d9f088a8dec74cb7c7b9f0bbef69a85c5efe27d3a6864363430	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	nss-3.28.4-3.0.1.el6_9.src.rpm	4ef109dc4832816d8721494a32d0a35839584e4eada13ee0b710db7adb5c8372	OVMSA-2023-0014	ovm34_x86_64_latest
	nss-3.28.4-3.0.1.el6_9.x86_64.rpm	2ea58b926e45d2dea34389523075681207e19c74c0fe3301ad4a9d833b7f42d5	OVMSA-2023-0014	ovm34_x86_64_latest
	nss-sysinit-3.28.4-3.0.1.el6_9.x86_64.rpm	58038e3b8e9a88aadc5df7c0bd1ad384ad58e5f57f6fca398fdda1ff97566c75	OVMSA-2023-0014	ovm34_x86_64_latest
	nss-tools-3.28.4-3.0.1.el6_9.x86_64.rpm	15f52b3967545d9f088a8dec74cb7c7b9f0bbef69a85c5efe27d3a6864363430	OVMSA-2023-0014	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team