nss-3.44.0-7.0.1.AXS4

エラータID: AXSA:2021-1747:04

Release date: 
Monday, May 17, 2021 - 06:38
Subject: 
nss-3.44.0-7.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

Network Security Services (NSS) is a set of libraries designed to support the
cross-platform development of security-enabled client and server applications.

Security Fix(es):

nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Bug Fix(es):

FTBFS: Paypal Cert expired (BZ#1883973)
FTBFS: IKE CLASS_1563 fails gtest (BZ#1884793)
Cannot compile code with nss headers and -Werror=strict-prototypes
(BZ#1885321)
CA HSM ncipher token disabled after RHEL-7.9 update (BZ#1932193)

Additional info:
https://access.redhat.com/errata/RHSA-2021:1384
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25648

Solution: 

Update packages.

CVEs: 
CVE-2020-25648
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
Additional Info: 

N/A

Download: 

SRPMS
  1. nss-3.44.0-7.0.1.AXS4.src.rpm
    MD5: 8531e82d65d90d63aa5290b4c1653a10
    SHA-256: dd20577ff56064abb5cbb49f6dd516f8a3cc9d26c15f4263406058a403682ece
    Size: 22.56 MB

Asianux Server 4 for x86
  1. nss-3.44.0-7.0.1.AXS4.i686.rpm
    MD5: edb8685095d001b44987a0b8c49c0877
    SHA-256: b70d2a4f6227118f00e9d52ef36deb19af69736dc8ab754d75d43ecc9c22c3cf
    Size: 888.70 kB
  2. nss-devel-3.44.0-7.0.1.AXS4.i686.rpm
    MD5: fb3d7c31210ff7be685418d7b0ff4c98
    SHA-256: b5b0e21f804b30207da0ac580f3d1044a209fc4353ff1dedb8d809b5975e89b6
    Size: 227.18 kB
  3. nss-sysinit-3.44.0-7.0.1.AXS4.i686.rpm
    MD5: 48e1d08e709a1ccca0b059f3491598a0
    SHA-256: da19dfb4e71f0363a379b70e624f7134f03ef4293f7c0447609e815103f361ab
    Size: 53.36 kB
  4. nss-tools-3.44.0-7.0.1.AXS4.i686.rpm
    MD5: 9f1845977efc2600c48bb3c828c7dc8d
    SHA-256: 0da5a0396d3bab2eeabd66543b7aa23f6ee13b35ea726b49372c4e1654555410
    Size: 482.25 kB

Asianux Server 4 for x86_64
  1. nss-3.44.0-7.0.1.AXS4.x86_64.rpm
    MD5: 8cafd91d1db70a05db5291ec2bbdb134
    SHA-256: 4e5b792de53026cbb2d9e92fe9c1cb95ae71dbd1592aaf2927d00ca9a288e313
    Size: 881.87 kB
  2. nss-devel-3.44.0-7.0.1.AXS4.x86_64.rpm
    MD5: b5abec5967f95db65c17d1083da6196c
    SHA-256: 0de6a7672dad64dcf06a00473d7da9304450e2e66d4b13920ea27b435155fcb7
    Size: 225.31 kB
  3. nss-sysinit-3.44.0-7.0.1.AXS4.x86_64.rpm
    MD5: c455f5884ac3c649d751dcc5d8e53ebd
    SHA-256: 34c3671bdf34038d385cb5526b44d5c596e907a38fb5f746b58c2f44756a6b6a
    Size: 52.96 kB
  4. nss-tools-3.44.0-7.0.1.AXS4.x86_64.rpm
    MD5: 580ccf50bfa2d18baadc1a188441b5a3
    SHA-256: 082104913d5288a6d1b04ffd3f14b6e59fc59375938bc0088c1f66cf328f0b94
    Size: 470.92 kB
  5. nss-3.44.0-7.0.1.AXS4.i686.rpm
    MD5: edb8685095d001b44987a0b8c49c0877
    SHA-256: b70d2a4f6227118f00e9d52ef36deb19af69736dc8ab754d75d43ecc9c22c3cf
    Size: 888.70 kB
  6. nss-devel-3.44.0-7.0.1.AXS4.i686.rpm
    MD5: fb3d7c31210ff7be685418d7b0ff4c98
    SHA-256: b5b0e21f804b30207da0ac580f3d1044a209fc4353ff1dedb8d809b5975e89b6
    Size: 227.18 kB