1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2014-1073

[ELSA-2014-1073] nss, nss-util, nss-softokn security, bug fix, and enhancement update

Severity Low
Affected Packages 11
CVEs 1
Info Packages References Vulnerabilities

nss
[3.16.2-2.0.1.el7_0]
- Added nss-vendor.patch to change vendor

[3.16.2-2]
- Restore missing options descriptions fix for certutil manpage
- Document certutil options --dump-ext-val, --extGeneric, and --extSAN
- Related: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1

[3.16.2-1]
- Rebase to nss-3.16.2
- Resolves: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1 (FF 31)
- Fix test failure detection in the %check section
- Move removal of unwanted source directories to the end of the %prep section
- Update various patches on account of the rebase
- Remove unused patches rendered obsolete by the rebase
- Fix libssl and test patches that disable ssl2 support
- Replace expired PayPal test certificate that breaks the build

nss-softokn
[3.16.2-1]
- Update to nss-3.16.2
- Resolves: Bug 1124659 - Rebase RHEL 7.1 to at least NSS-SOFTOKN 3.16.1 (FF 31)

nss-util
[3.16.2-1]
- Update to nss-3.16.2
- Resolves: Bug 1124659 - Rebase RHEL-7.0 to at least NSS 3.16.1 (FF 31)

Package Affected Version
pkg:rpm/oraclelinux/nss?distro=oraclelinux-7.0 < 3.16.2-2.0.1.el7_0
pkg:rpm/oraclelinux/nss-util?distro=oraclelinux-7.0 < 3.16.2-1.el7_0
pkg:rpm/oraclelinux/nss-util-devel?distro=oraclelinux-7.0 < 3.16.2-1.el7_0
pkg:rpm/oraclelinux/nss-tools?distro=oraclelinux-7.0 < 3.16.2-2.0.1.el7_0
pkg:rpm/oraclelinux/nss-sysinit?distro=oraclelinux-7.0 < 3.16.2-2.0.1.el7_0
pkg:rpm/oraclelinux/nss-softokn?distro=oraclelinux-7.0 < 3.16.2-1.el7_0
pkg:rpm/oraclelinux/nss-softokn-freebl?distro=oraclelinux-7.0 < 3.16.2-1.el7_0
pkg:rpm/oraclelinux/nss-softokn-freebl-devel?distro=oraclelinux-7.0 < 3.16.2-1.el7_0
pkg:rpm/oraclelinux/nss-softokn-devel?distro=oraclelinux-7.0 < 3.16.2-1.el7_0
pkg:rpm/oraclelinux/nss-pkcs11-devel?distro=oraclelinux-7.0 < 3.16.2-2.0.1.el7_0
pkg:rpm/oraclelinux/nss-devel?distro=oraclelinux-7.0 < 3.16.2-2.0.1.el7_0
ID
ELSA-2014-1073
Severity
low
URL
https://linux.oracle.com/errata/ELSA-2014-1073.html
Published
2014-08-18T00:00:00
(10 years ago)
Modified
2014-08-18T00:00:00
(10 years ago)
Rights
Copyright 2014 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/nss?distro=oraclelinux-7.0 oraclelinux nss < 3.16.2-2.0.1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-util?distro=oraclelinux-7.0 oraclelinux nss-util < 3.16.2-1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-util-devel?distro=oraclelinux-7.0 oraclelinux nss-util-devel < 3.16.2-1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-tools?distro=oraclelinux-7.0 oraclelinux nss-tools < 3.16.2-2.0.1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-sysinit?distro=oraclelinux-7.0 oraclelinux nss-sysinit < 3.16.2-2.0.1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-softokn?distro=oraclelinux-7.0 oraclelinux nss-softokn < 3.16.2-1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-softokn-freebl?distro=oraclelinux-7.0 oraclelinux nss-softokn-freebl < 3.16.2-1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-softokn-freebl-devel?distro=oraclelinux-7.0 oraclelinux nss-softokn-freebl-devel < 3.16.2-1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-softokn-devel?distro=oraclelinux-7.0 oraclelinux nss-softokn-devel < 3.16.2-1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-pkcs11-devel?distro=oraclelinux-7.0 oraclelinux nss-pkcs11-devel < 3.16.2-2.0.1.el7_0 oraclelinux-7.0
Affected pkg:rpm/oraclelinux/nss-devel?distro=oraclelinux-7.0 oraclelinux nss-devel < 3.16.2-2.0.1.el7_0 oraclelinux-7.0
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date