Oracle alert ELSA-2020-4076 (nss and nspr)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2020-4076 Moderate: Oracle Linux 7 nss and nspr security, bug fix, and enhancement update | |
| Date: | Thu, 08 Oct 2020 20:20:41 -0700 | |
| Message-ID: | <4e0df6a3-f0be-d7fd-f721-cee848b6467c@oracle.com> |
Oracle Linux Security Advisory ELSA-2020-4076 http://linux.oracle.com/errata/ELSA-2020-4076.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: nspr-4.25.0-2.el7_9.i686.rpm nspr-4.25.0-2.el7_9.x86_64.rpm nspr-devel-4.25.0-2.el7_9.i686.rpm nspr-devel-4.25.0-2.el7_9.x86_64.rpm nss-3.53.1-3.el7_9.i686.rpm nss-3.53.1-3.el7_9.x86_64.rpm nss-devel-3.53.1-3.el7_9.i686.rpm nss-devel-3.53.1-3.el7_9.x86_64.rpm nss-pkcs11-devel-3.53.1-3.el7_9.i686.rpm nss-pkcs11-devel-3.53.1-3.el7_9.x86_64.rpm nss-softokn-3.53.1-6.0.1.el7_9.i686.rpm nss-softokn-3.53.1-6.0.1.el7_9.x86_64.rpm nss-softokn-devel-3.53.1-6.0.1.el7_9.i686.rpm nss-softokn-devel-3.53.1-6.0.1.el7_9.x86_64.rpm nss-softokn-freebl-3.53.1-6.0.1.el7_9.i686.rpm nss-softokn-freebl-3.53.1-6.0.1.el7_9.x86_64.rpm nss-softokn-freebl-devel-3.53.1-6.0.1.el7_9.i686.rpm nss-softokn-freebl-devel-3.53.1-6.0.1.el7_9.x86_64.rpm nss-sysinit-3.53.1-3.el7_9.x86_64.rpm nss-tools-3.53.1-3.el7_9.x86_64.rpm nss-util-3.53.1-1.el7_9.i686.rpm nss-util-3.53.1-1.el7_9.x86_64.rpm nss-util-devel-3.53.1-1.el7_9.i686.rpm nss-util-devel-3.53.1-1.el7_9.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/nspr-4.25.0-2.el7... http://oss.oracle.com/ol7/SRPMS-updates/nss-3.53.1-3.el7_... http://oss.oracle.com/ol7/SRPMS-updates/nss-softokn-3.53.... http://oss.oracle.com/ol7/SRPMS-updates/nss-util-3.53.1-1... Description of changes: nspr [4.25.0-2] - Rebuild to fix wrong dist tag [4.25.0-1] - Rebase to NSPR 4.25 nss [3.53.1-3] - Disable dh timing test because it's unreliable on s390 (from Bob Relyea) - Explicitly enable upgradedb/sharedb test cycles [3.53.1-2] - Disable TLS 1.3 by default [3.53.1-1] - Rebase to NSS 3.53.1 [3.44.0-8] - Increase timeout on ssl_gtest so that slow platforms can complete when running on a busy system. nss-softokn [3.53.1-6.0.1] - Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337] - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814], [Orabug: 26617879], [Orabug: 26617849] [3.53.1-6] - turn of ALTIVEC instruction for powerpc because they require power8 and we need to support power7 on RHEL7 still. - Fix typo in measure. - Make sure only 2048 and greater primes are used in FIPS mode for dh. [3.53.1-5] - Fix the patch application in the previous change [3.53.1-4] - Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked [3.53.1-3] - include patches for CVE-2020-6829, CVE-2020-12400, and CVE-2020-12401 from upstream (ECC constant time issues). - include patches for CVE-2020-12403 from upstream (CHACHA issues). - include self-tests for kdfs and cmac. [3.53.1-2] - Install cmac.h required by blapi.h (#1764513) [3.53.1-1] - Rebase to NSS 3.53.1 nss-util [3.53.1-1] - Rebase to NSS 3.53.1 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata