Lucene search

K
oraclelinuxOracleLinuxELSA-2015-1664
HistoryAug 24, 2015 - 12:00 a.m.

nss security, bug fix, and enhancement update

2015-08-2400:00:00
linux.oracle.com
15

0.003 Low

EPSS

Percentile

67.3%

[3.19.1-1]

  • Rebase nss to 3.19.1
  • Pick up upstream fix for client auth. regression caused by 3.19.1
  • Revert upstream change to minimum key sizes
  • Remove patches that rendered obsolote by the rebase
  • Update existing patches on account of the rebase
    [3.18.0-7]
  • Pick up upstream patch from nss-3.19.1
  • Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
  • Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)