nss security and bug fix update

2017-05-3000:00:00

linux.oracle.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.029 Low

EPSS

Percentile

89.7%

JSON

[3.28.4-1.2.0.1]

Added nss-vendor.patch to change vendor
[3.28.4-1.2]
Include CKBI 2.14 and updated CA constraints from NSS 3.28.5
[3.28.4-1.1]
Fix zero-length record treatment in SSL3_GatherData

OSVersionArchitecturePackageVersionFilename
oracle linux7srcnss< 3.28.4-1.2.0.1.el7_3nss-3.28.4-1.2.0.1.el7_3.src.rpm
oracle linux7i686nss< 3.28.4-1.2.0.1.el7_3nss-3.28.4-1.2.0.1.el7_3.i686.rpm
oracle linux7x86_64nss< 3.28.4-1.2.0.1.el7_3nss-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux7i686nss-devel< 3.28.4-1.2.0.1.el7_3nss-devel-3.28.4-1.2.0.1.el7_3.i686.rpm
oracle linux7x86_64nss-devel< 3.28.4-1.2.0.1.el7_3nss-devel-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux7i686nss-pkcs11-devel< 3.28.4-1.2.0.1.el7_3nss-pkcs11-devel-3.28.4-1.2.0.1.el7_3.i686.rpm
oracle linux7x86_64nss-pkcs11-devel< 3.28.4-1.2.0.1.el7_3nss-pkcs11-devel-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux7x86_64nss-sysinit< 3.28.4-1.2.0.1.el7_3nss-sysinit-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux7x86_64nss-tools< 3.28.4-1.2.0.1.el7_3nss-tools-3.28.4-1.2.0.1.el7_3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	nss	< 3.28.4-1.2.0.1.el7_3	nss-3.28.4-1.2.0.1.el7_3.src.rpm
oracle linux	7	i686	nss	< 3.28.4-1.2.0.1.el7_3	nss-3.28.4-1.2.0.1.el7_3.i686.rpm
oracle linux	7	x86_64	nss	< 3.28.4-1.2.0.1.el7_3	nss-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux	7	i686	nss-devel	< 3.28.4-1.2.0.1.el7_3	nss-devel-3.28.4-1.2.0.1.el7_3.i686.rpm
oracle linux	7	x86_64	nss-devel	< 3.28.4-1.2.0.1.el7_3	nss-devel-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux	7	i686	nss-pkcs11-devel	< 3.28.4-1.2.0.1.el7_3	nss-pkcs11-devel-3.28.4-1.2.0.1.el7_3.i686.rpm
oracle linux	7	x86_64	nss-pkcs11-devel	< 3.28.4-1.2.0.1.el7_3	nss-pkcs11-devel-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux	7	x86_64	nss-sysinit	< 3.28.4-1.2.0.1.el7_3	nss-sysinit-3.28.4-1.2.0.1.el7_3.x86_64.rpm
oracle linux	7	x86_64	nss-tools	< 3.28.4-1.2.0.1.el7_3	nss-tools-3.28.4-1.2.0.1.el7_3.x86_64.rpm