nss-3.53.1-7.el7

エラータID: AXSA:2021-1732:03

Release date: 
Friday, April 30, 2021 - 16:15
Subject: 
nss-3.53.1-7.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Network Security Services (NSS) is a set of libraries designed to support the
cross-platform development of security-enabled client and server applications.

Security Fix(es):

nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Bug Fix(es):

FTBFS: Paypal Cert expired
FTBFS: IKE CLASS_1563 fails gtest
Cannot compile code with nss headers and -Werror=strict-prototypes

CA HSM ncipher token disabled after update

Solution: 

Update packages.

CVEs: 
CVE-2020-25648
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
Additional Info: 

N/A

Download: 

SRPMS
  1. nss-3.53.1-7.el7.src.rpm
    MD5: a4f81c829ef61c71bb979981b887b953
    SHA-256: c5601a4b705d8be24bdeb0c42029380790df7e6e639fb943cd69f71e6b08299a
    Size: 77.68 MB

Asianux Server 7 for x86_64
  1. nss-3.53.1-7.el7.x86_64.rpm
    MD5: 56ccc7b15ab8fa675bcf6cdfed35267c
    SHA-256: 41b408176cfc8b49b0f588fa5fed8167ed99e53dd16f33fed2f6da981d0b7687
    Size: 867.62 kB
  2. nss-devel-3.53.1-7.el7.x86_64.rpm
    MD5: a1fa16c713995ecb0c52bb7772297efa
    SHA-256: 455dc8b7c796c5ea383d5df9d953ffb22e1a4409a282de0fd37536557dc56914
    Size: 239.22 kB
  3. nss-sysinit-3.53.1-7.el7.x86_64.rpm
    MD5: 63a70667f473e9c54049c663bef64ce5
    SHA-256: 25f104141df19791cd34a246347c32875977c65055bb20e3d490caa8404bb8ca
    Size: 64.62 kB
  4. nss-tools-3.53.1-7.el7.x86_64.rpm
    MD5: 98bd786863a38128b35fd4999f528bd0
    SHA-256: 8834f5af5ea64ad76e2f210839bc4d244de7c55f2d0623426e445de6a12f0321
    Size: 534.14 kB
  5. nss-3.53.1-7.el7.i686.rpm
    MD5: e4f27d896ae229f343a019ae33065999
    SHA-256: 8f2eebcb1218183c0b6b86b9d6c17e141d59e70852e56d920757d2ccfb76c64f
    Size: 868.42 kB
  6. nss-devel-3.53.1-7.el7.i686.rpm
    MD5: 0b283400359674bf82c1187249a7b5d0
    SHA-256: 79863e083fa7c46a8f5aa4578f43902b929cf275445e41957631f2cc6f8cfa36
    Size: 240.67 kB