OVMSA-2018-0264

OVMSA-2018-0264 - nss security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2018-10-10

Description

[3.36.0-9.0.1]
- Added nss-vendor.patch to change vendor
- Temporarily disable some tests until expired PayPalEE.cert is renewed

[3.36.0-9]
- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
mistake (the symbol was not exported from libnss)

[3.36.0-8]
- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h

[3.36.0-7]
- rebuild

[3.36.0-6]
- Keep legacy code signing trust flags for backwards compatibility

[3.36.0-5]
- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running

[3.36.0-4]
- Ignore tests which only works with newer nss-softokn

[3.36.0-3]
- Use the correct tarball of NSS 3.36 release
- Ignore EncryptDeriveTest which only works with newer nss-softokn

[3.36.0-2]
- Don't skip non-FIPS and ECC test cases in ssl.sh

[3.36.0-1]
- Rebase to NSS 3.36.0

[3.36.0-0.1.beta]
- Rebase to NSS 3.36.0 BETA
- Remove upstreamed nss-is-token-present-race.patch
- Revert the upstream changes that default to sql database

[3.34.0-3]
- Replace race.patch and nss-3.16-token-init-race.patch with
a proper upstream fix

[3.34.0-2]
- Don't restrict nss_cycles to sharedb

[3.34.0-1]
- Rebase to NSS 3.34.0

Related CVEs

CVE-2018-12384

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle VM 3.3 (x86_64)	nss-3.36.0-9.0.1.el6_10.src.rpm	071fed9d0028d46982aa3e4e5667e850	OVMBA-2019-0058
	nss-3.36.0-9.0.1.el6_10.x86_64.rpm	a390d0077caf2a7b79d29e37f2999933	OVMBA-2019-0058
	nss-sysinit-3.36.0-9.0.1.el6_10.x86_64.rpm	4468d01d73f28a66eb813d414a0e29e8	OVMBA-2019-0058
	nss-tools-3.36.0-9.0.1.el6_10.x86_64.rpm	e60d7be8d54ec0dba08840a07f53dce4	OVMBA-2019-0058
Oracle VM 3.4 (x86_64)	nss-3.36.0-9.0.1.el6_10.src.rpm	071fed9d0028d46982aa3e4e5667e850	OVMBA-2019-0058
	nss-3.36.0-9.0.1.el6_10.x86_64.rpm	a390d0077caf2a7b79d29e37f2999933	OVMBA-2019-0058
	nss-sysinit-3.36.0-9.0.1.el6_10.x86_64.rpm	4468d01d73f28a66eb813d414a0e29e8	OVMBA-2019-0058
	nss-tools-3.36.0-9.0.1.el6_10.x86_64.rpm	e60d7be8d54ec0dba08840a07f53dce4	OVMBA-2019-0058

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team