OVMSA-2018-0264

OVMSA-2018-0264 - nss security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2018-10-10

Description

[3.36.0-9.0.1]
- Added nss-vendor.patch to change vendor
- Temporarily disable some tests until expired PayPalEE.cert is renewed

[3.36.0-9]
- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
mistake (the symbol was not exported from libnss)

[3.36.0-8]
- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h

[3.36.0-7]
- rebuild

[3.36.0-6]
- Keep legacy code signing trust flags for backwards compatibility

[3.36.0-5]
- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running

[3.36.0-4]
- Ignore tests which only works with newer nss-softokn

[3.36.0-3]
- Use the correct tarball of NSS 3.36 release
- Ignore EncryptDeriveTest which only works with newer nss-softokn

[3.36.0-2]
- Don't skip non-FIPS and ECC test cases in ssl.sh

[3.36.0-1]
- Rebase to NSS 3.36.0

[3.36.0-0.1.beta]
- Rebase to NSS 3.36.0 BETA
- Remove upstreamed nss-is-token-present-race.patch
- Revert the upstream changes that default to sql database

[3.34.0-3]
- Replace race.patch and nss-3.16-token-init-race.patch with
a proper upstream fix

[3.34.0-2]
- Don't restrict nss_cycles to sharedb

[3.34.0-1]
- Rebase to NSS 3.34.0

Related CVEs

CVE-2018-12384

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	nss-3.36.0-9.0.1.el6_10.src.rpm	2e469fdd404ae94ef83939c9f2ad53967e468a1ce39ab1ae6c3c0a93ef62dcb9	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
	nss-3.36.0-9.0.1.el6_10.x86_64.rpm	06bf4de18b1e65e9e5385126e6eadc51a9cb951bbdc385d27c5c0f8af4fbb337	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
	nss-sysinit-3.36.0-9.0.1.el6_10.x86_64.rpm	22d62d174686b83bafcfcccf84f6c203dd133d605f749f863c660ac83d5bf6b6	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
	nss-tools-3.36.0-9.0.1.el6_10.x86_64.rpm	c174382f140e8ce16b022acbf5405e02d696d172bd885422ae7168a9e272c53e	OVMSA-2023-0014	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	nss-3.36.0-9.0.1.el6_10.src.rpm	2e469fdd404ae94ef83939c9f2ad53967e468a1ce39ab1ae6c3c0a93ef62dcb9	OVMSA-2023-0014	ovm34_x86_64_latest
	nss-3.36.0-9.0.1.el6_10.x86_64.rpm	06bf4de18b1e65e9e5385126e6eadc51a9cb951bbdc385d27c5c0f8af4fbb337	OVMSA-2023-0014	ovm34_x86_64_latest
	nss-sysinit-3.36.0-9.0.1.el6_10.x86_64.rpm	22d62d174686b83bafcfcccf84f6c203dd133d605f749f863c660ac83d5bf6b6	OVMSA-2023-0014	ovm34_x86_64_latest
	nss-tools-3.36.0-9.0.1.el6_10.x86_64.rpm	c174382f140e8ce16b022acbf5405e02d696d172bd885422ae7168a9e272c53e	OVMSA-2023-0014	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team