nss-3.19.1-19.el7

エラータID: AXSA:2016-016:01

Release date: 
Friday, January 8, 2016 - 13:00
Subject: 
nss-3.19.1-19.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.

Security issues fixed with this release:

CVE-2015-7575
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2015-7575
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
Additional Info: 

N/A

Download: 

SRPMS
  1. nss-3.19.1-19.el7.src.rpm
    MD5: 4c4f1632b474ea55abc235584baf2d2c
    SHA-256: b378aba0eff78034fdfbf2a31f3e579dbe23750503f6286ebf204469f5cab6aa
    Size: 6.78 MB

Asianux Server 7 for x86_64
  1. nss-3.19.1-19.el7.x86_64.rpm
    MD5: bedfa17429f138df731d49f024aade3d
    SHA-256: 96db2fcb74a8800a85acc92cb770592c65f6e002c8401cf12fd5eaacb2a88fd4
    Size: 851.51 kB
  2. nss-devel-3.19.1-19.el7.x86_64.rpm
    MD5: 4455fa31f5948d377028b3bce4bce7fe
    SHA-256: a5c4bc0cd37107455820dcf3c37dcf4bb080ad68ff2a4e4ccee056850a0e955a
    Size: 208.01 kB
  3. nss-sysinit-3.19.1-19.el7.x86_64.rpm
    MD5: 270534808454458d1e8c37c62c44517d
    SHA-256: 55fc9f2c483ca154d7e70b7e4723b2bfa8d6cfd1395651f66ac7519fb6ac8158
    Size: 52.89 kB
  4. nss-tools-3.19.1-19.el7.x86_64.rpm
    MD5: 525b2972e1ab5402ba15cbc5975d9782
    SHA-256: e50163080d5aabdd7acbc0e460a0abc614a746aecdf5c6a897137cfb31a66185
    Size: 483.39 kB
  5. nss-3.19.1-19.el7.i686.rpm
    MD5: a3a44145164a4dbae71b1c6d713ddc03
    SHA-256: b95d9914fe278af899b2f5ce703764f95d8b48ec818533cb6c999e5ad56cae27
    Size: 847.95 kB
  6. nss-devel-3.19.1-19.el7.i686.rpm
    MD5: b13685198e81ad0637819444ba15cef8
    SHA-256: db7954b8ccc85c4198a9b785274899a87ac18d76239dbf3d79282fc3aa0733f0
    Size: 209.36 kB