Fedora alert FEDORA-2009-1291 (nss)
| From: | updates@fedoraproject.org | |
| To: | fedora-package-announce@redhat.com | |
| Subject: | [SECURITY] Fedora 10 Update: nss-3.12.2.0-4.fc10 | |
| Date: | Thu, 05 Feb 2009 02:15:23 +0000 | |
| Message-ID: | <20090205021523.59D40208D67@bastion.fedora.phx.redhat.com> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-1291 2009-02-05 01:17:08 -------------------------------------------------------------------------------- Name : nss Product : Fedora 10 Version : 3.12.2.0 Release : 4.fc10 URL : http://www.mozilla.org/projects/security/pki/nss/ Summary : Network Security Services Description : Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. -------------------------------------------------------------------------------- Update Information: This updates adds protection against rogue CA that was generated as a proof-of- concept of the MD5 collision attacks against X509 signatures: http://www.win.tue.nl/hashclash/rogue-ca/ , related to CVE-2004-2761. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 23 2009 Kai Engert <kengert@redhat.com> - 3.12.2.0-4 - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nss' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...