nss security and bug fix update

2017-05-3000:00:00

linux.oracle.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.029 Low

EPSS

Percentile

89.7%

JSON

[3.28.4-3.0.1]

Added nss-vendor.patch to change vendor
Temporarily disable some tests until expired PayPalEE.cert is renewed
[3.28.4-3]
Fix zero-length record treatment for stream ciphers and SSLv2
[3.28.4-2]
Include CKBI 2.14 and updated CA constraints from NSS 3.28.5

OSVersionArchitecturePackageVersionFilename
oracle linux6srcnss< 3.28.4-3.0.1.el6_9nss-3.28.4-3.0.1.el6_9.src.rpm
oracle linux6i686nss< 3.28.4-3.0.1.el6_9nss-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux6i686nss-devel< 3.28.4-3.0.1.el6_9nss-devel-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux6i686nss-pkcs11-devel< 3.28.4-3.0.1.el6_9nss-pkcs11-devel-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux6i686nss-sysinit< 3.28.4-3.0.1.el6_9nss-sysinit-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux6i686nss-tools< 3.28.4-3.0.1.el6_9nss-tools-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux6srcnss< 3.28.4-3.0.1.el6_9nss-3.28.4-3.0.1.el6_9.src.rpm
oracle linux6i686nss< 3.28.4-3.0.1.el6_9nss-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux6x86_64nss< 3.28.4-3.0.1.el6_9nss-3.28.4-3.0.1.el6_9.x86_64.rpm
oracle linux6i686nss-devel< 3.28.4-3.0.1.el6_9nss-devel-3.28.4-3.0.1.el6_9.i686.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	6	src	nss	< 3.28.4-3.0.1.el6_9	nss-3.28.4-3.0.1.el6_9.src.rpm
oracle linux	6	i686	nss	< 3.28.4-3.0.1.el6_9	nss-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux	6	i686	nss-devel	< 3.28.4-3.0.1.el6_9	nss-devel-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux	6	i686	nss-pkcs11-devel	< 3.28.4-3.0.1.el6_9	nss-pkcs11-devel-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux	6	i686	nss-sysinit	< 3.28.4-3.0.1.el6_9	nss-sysinit-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux	6	i686	nss-tools	< 3.28.4-3.0.1.el6_9	nss-tools-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux	6	src	nss	< 3.28.4-3.0.1.el6_9	nss-3.28.4-3.0.1.el6_9.src.rpm
oracle linux	6	i686	nss	< 3.28.4-3.0.1.el6_9	nss-3.28.4-3.0.1.el6_9.i686.rpm
oracle linux	6	x86_64	nss	< 3.28.4-3.0.1.el6_9	nss-3.28.4-3.0.1.el6_9.x86_64.rpm
oracle linux	6	i686	nss-devel	< 3.28.4-3.0.1.el6_9	nss-devel-3.28.4-3.0.1.el6_9.i686.rpm