OVMSA-2019-0057

OVMSA-2019-0057 - nss-softokn security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-12-17

Description

[3.44.0-6.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
[Orabug 26617833], [Orabug 26617780]

[3.44.0-6]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)

[3.44.0-5]
- include sqlite3_open_v2 in the patch

[3.44.0-4]
- actually turn on the old sqlite patch

[3.44.0-3]
- add back old sqlite patch

[3.44.0-2]
- add back add-relro patch

[3.44.0-1]
- Rebase for Firefox
- Resolves Bug 1743628

[3.14.3-23.3]
- Build using the proper RHEL-6.8-Z release target
- Resolves: Bug 1337821

[3.14.3-23.2]
- Bump the release tag
- Turn off AVX if the OS (or VM) doesn't support it.
- Resolves: Bug 1337821

[3.14.3-23.1]
- Turn off AVX if the OS (or VM) doesn't support it.
- Resolves: Bug 1337821

Related CVEs

CVE-2019-11745

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle VM 3.3 (x86_64)	nss-softokn-3.44.0-6.0.1.el6_10.src.rpm	c564c19ceca28c3ff8c1c7d52ba24509	-
	nss-softokn-3.44.0-6.0.1.el6_10.x86_64.rpm	4b97c3afee30cdee9f6ee7f2e7a93ce7	-
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.i686.rpm	141c0a679f59ea7f78c1907c42b36f59	-
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.x86_64.rpm	64ac880678d6a02d53b727261089b4c8	-
Oracle VM 3.4 (x86_64)	nss-softokn-3.44.0-6.0.1.el6_10.src.rpm	c564c19ceca28c3ff8c1c7d52ba24509	-
	nss-softokn-3.44.0-6.0.1.el6_10.x86_64.rpm	4b97c3afee30cdee9f6ee7f2e7a93ce7	-
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.i686.rpm	141c0a679f59ea7f78c1907c42b36f59	-
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.x86_64.rpm	64ac880678d6a02d53b727261089b4c8	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team