nss-3.19.1-8.AXS4
エラータID: AXSA:2016-007:01
Release date:
Friday, January 8, 2016 - 03:40
Subject:
nss-3.19.1-8.AXS4
Affected Channels:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
Moderate
Description:
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.
Security issues fixed with this release:
CVE-2015-7575
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
Solution:
Update packages.
CVEs:
CVE-2015-7575
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Additional Info:
N/A
Download:
SRPMS
- nss-3.19.1-8.AXS4.src.rpm
MD5: 4c8fbe10dbe75d8f04d73891d999ebb4
SHA-256: 40c88ce82aae48f28d0b371dca1b85468e8b2ddaff33990d687b62fbcdeb0f52
Size: 5.35 MB
Asianux Server 4 for x86
- nss-3.19.1-8.AXS4.i686.rpm
MD5: 6d597d3863d535bd7369fb6d06e0bd37
SHA-256: 14f0b464725490a6b02a664f9f732ba3ff37e2ec6dbe2e3e76a115c5c8fd1a29
Size: 859.90 kB - nss-devel-3.19.1-8.AXS4.i686.rpm
MD5: 45dd9f10b7e1c55de1748bf1b9b2a059
SHA-256: 68a7646c6ad9e24d45ed1c6a554128da029759239d659d20d0d79f24a77f6588
Size: 202.18 kB - nss-sysinit-3.19.1-8.AXS4.i686.rpm
MD5: aa66c3b1fd9a693f5f0ff8b1724480b7
SHA-256: cbdb1e94d05938c8c5a252149d621454159c5eb96d888145b35bd4451327de96
Size: 45.38 kB - nss-tools-3.19.1-8.AXS4.i686.rpm
MD5: 6d9daea67a6ac8db2fb7ff695d5fa1a0
SHA-256: 8bef30a841ca092afd9079a5c85138cde7e454516bceb40dccedc93312144d4c
Size: 441.56 kB
Asianux Server 4 for x86_64
- nss-3.19.1-8.AXS4.x86_64.rpm
MD5: 15424ad23d64457852f209a441232050
SHA-256: 85606415bf9decf15c13f85caf092b6fca86d3d1033dab5a50e2f6cd1c180013
Size: 855.86 kB - nss-devel-3.19.1-8.AXS4.x86_64.rpm
MD5: 35e47a853c75354f29d6c57df669ee91
SHA-256: d829ae8095ccbc0c70f8b96a2335c2f570e95c28de60bf61a4882290b8d22bfc
Size: 200.29 kB - nss-sysinit-3.19.1-8.AXS4.x86_64.rpm
MD5: 6902c9c4caf656d0866d36caf0644cfa
SHA-256: e48e72b6046c8e1cae3ea3cb8c116a13ef9d1d00213a48765085d3b2dacd747c
Size: 44.99 kB - nss-tools-3.19.1-8.AXS4.x86_64.rpm
MD5: bce1e292f5b73171e66a60fbf53eb0f9
SHA-256: fc6ef9403ad37ea04e1f24800b324a35fd509a457f0cb348ae2f0a0092597c90
Size: 432.58 kB - nss-3.19.1-8.AXS4.i686.rpm
MD5: 6d597d3863d535bd7369fb6d06e0bd37
SHA-256: 14f0b464725490a6b02a664f9f732ba3ff37e2ec6dbe2e3e76a115c5c8fd1a29
Size: 859.90 kB - nss-devel-3.19.1-8.AXS4.i686.rpm
MD5: 45dd9f10b7e1c55de1748bf1b9b2a059
SHA-256: 68a7646c6ad9e24d45ed1c6a554128da029759239d659d20d0d79f24a77f6588
Size: 202.18 kB