Scientific Linux alert SLSA-2018:2898-1 (nss)

From:
             
 
Scott Reid <svreid@fnal.gov> 
To:
             
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
             
 
Security ERRATA Moderate: nss on SL6.x i386/x86_64 
Date:
             
 
Wed, 10 Oct 2018 17:35:35 +0000
Message-ID:
             
 
<20181010173535.9282.83656@slpackages.fnal.gov>
Synopsis:          Moderate: nss security update
Advisory ID:       SLSA-2018:2898-1
Issue Date:        2018-10-09
CVE Numbers:       CVE-2018-12384
--

Security Fix(es):

* nss: ServerHello.random is all zeros when handling a v2-compatible
ClientHello (CVE-2018-12384)
--

SL6
  x86_64
    nss-3.36.0-9.el6_10.i686.rpm
    nss-3.36.0-9.el6_10.x86_64.rpm
    nss-debuginfo-3.36.0-9.el6_10.i686.rpm
    nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm
    nss-sysinit-3.36.0-9.el6_10.x86_64.rpm
    nss-tools-3.36.0-9.el6_10.x86_64.rpm
    nss-devel-3.36.0-9.el6_10.i686.rpm
    nss-devel-3.36.0-9.el6_10.x86_64.rpm
    nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm
    nss-pkcs11-devel-3.36.0-9.el6_10.x86_64.rpm
  i386
    nss-3.36.0-9.el6_10.i686.rpm
    nss-debuginfo-3.36.0-9.el6_10.i686.rpm
    nss-sysinit-3.36.0-9.el6_10.i686.rpm
    nss-tools-3.36.0-9.el6_10.i686.rpm
    nss-devel-3.36.0-9.el6_10.i686.rpm
    nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm

- Scientific Linux Development Team