Lucene search

K
oraclelinuxOracleLinuxELSA-2020-3280
HistoryAug 04, 2020 - 12:00 a.m.

nss and nspr security, bug fix, and enhancement update

2020-08-0400:00:00
linux.oracle.com
20

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

nspr
[4.25.0-2]

  • Rebuild
    [4.25.0-1]
  • Update to NSPR 4.25
    nss
    [3.53.1-11]
  • Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)
    [3.53.1-10]
  • Disable dh timing test because it’s unreliable on s390
    [3.53.1-9]
  • Explicitly enable upgradedb/sharedb test cycles
    [3.53.1-8]
  • Disable Delegated Credentials for TLS
    [3.53.1-7]
  • Fix attribute decryption issue where the private key components
    integrity check on private attributes where not being checked.
    [3.53.1-6]
  • Update nss-rsa-pkcs1-sigalgs.patch to the upstream version
    [3.53.1-5]
  • Include required checks for dh and ecdh key generation in FIPS mode.
    [3.53.1-4]
  • Add better checks for dh derive operations in FIPS mode.
    [3.53.1-3]
  • Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
  • Adjust for update-crypto-policies packaging change (#1848649)
  • Fix compilation with -Werror=strict-prototypes (#1843417)
    [3.53.1-2]
  • Fix regression in MD5 disablement (#1849938)
  • Include rsa_pkcs1_* in signature_algorithms extension (#1847945)
    [3.53.1-1]
  • Update to NSS 3.53.1
    [3.53.0-1]
  • Update to NSS 3.53

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C