OVMSA-2019-0057

OVMSA-2019-0057 - nss-softokn security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-12-17

Description

[3.44.0-6.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
[Orabug 26617833], [Orabug 26617780]

[3.44.0-6]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)

[3.44.0-5]
- include sqlite3_open_v2 in the patch

[3.44.0-4]
- actually turn on the old sqlite patch

[3.44.0-3]
- add back old sqlite patch

[3.44.0-2]
- add back add-relro patch

[3.44.0-1]
- Rebase for Firefox
- Resolves Bug 1743628

[3.14.3-23.3]
- Build using the proper RHEL-6.8-Z release target
- Resolves: Bug 1337821

[3.14.3-23.2]
- Bump the release tag
- Turn off AVX if the OS (or VM) doesn't support it.
- Resolves: Bug 1337821

[3.14.3-23.1]
- Turn off AVX if the OS (or VM) doesn't support it.
- Resolves: Bug 1337821

Related CVEs

CVE-2019-11745

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle VM 3.3 (x86_64)	nss-softokn-3.44.0-6.0.1.el6_10.src.rpm	66ae242a599f4f55fa4211e1352df82a71adecbeaa892ee8319e46249f1aac70	-	ovm3_x86_64_3.3_patch
	nss-softokn-3.44.0-6.0.1.el6_10.x86_64.rpm	f36ee328dc341850b0e2dc9acee77676852ade637bc00e16f33c7d736ea1d4ed	-	ovm3_x86_64_3.3_patch
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.i686.rpm	ba45850dd03efd2f473e41910df46f377544829a4fa5b9acc51a177e9c5bf6e0	-	ovm3_x86_64_3.3_patch
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.x86_64.rpm	8e69f394c77180ea8680ae950fb4b8a03bdcdfd7628962e9a947657d59499833	-	ovm3_x86_64_3.3_patch
Oracle VM 3.4 (x86_64)	nss-softokn-3.44.0-6.0.1.el6_10.src.rpm	66ae242a599f4f55fa4211e1352df82a71adecbeaa892ee8319e46249f1aac70	-	ovm34_x86_64_latest
	nss-softokn-3.44.0-6.0.1.el6_10.x86_64.rpm	f36ee328dc341850b0e2dc9acee77676852ade637bc00e16f33c7d736ea1d4ed	-	ovm34_x86_64_latest
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.i686.rpm	ba45850dd03efd2f473e41910df46f377544829a4fa5b9acc51a177e9c5bf6e0	-	ovm34_x86_64_latest
	nss-softokn-freebl-3.44.0-6.0.1.el6_10.x86_64.rpm	8e69f394c77180ea8680ae950fb4b8a03bdcdfd7628962e9a947657d59499833	-	ovm34_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team