nss-3.28.4-1.0.el7, nss-util-3.28.4-1.0.el7

エラータID: AXSA:2017-1627:01

Release date: 
Friday, April 21, 2017 - 18:07
Subject: 
nss-3.28.4-1.0.el7, nss-util-3.28.4-1.0.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

nss
Network Security Services (NSS) is a set of libraries designed to
support cross-platform development of security-enabled client and
server applications. Applications built with NSS can support SSL v2
and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509
v3 certificates, and other security standards.

nss-util
Utilities for Network Security Services and the Softoken module

Security issues fixed with this release:

CVE-2017-5461
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

The following packages have been upgraded to a newer upstream version: nss (3.28.4), nss-util (3.28.4).

Solution: 

Update package.

CVEs: 
CVE-2017-5461
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.
Additional Info: 

N/A

Download: 

SRPMS
  1. nss-util-3.28.4-1.0.el7.src.rpm
    MD5: 1fa849e312418e3c597e4a9eb53dcd40
    SHA-256: a0c7e542626775cd01e41ebbe77146c1cb6bc952d34cfbef6c93e132a4ab0980
    Size: 1.07 MB
  2. nss-3.28.4-1.0.el7.src.rpm
    MD5: 46dbf9a22abaf049bd559b757675cb4b
    SHA-256: dedef7335d6684531f245d4ce4e71ed8be8c25cd0037a34e6ae1b03d4116ba00
    Size: 7.24 MB

Asianux Server 7 for x86_64
  1. nss-util-3.28.4-1.0.el7.x86_64.rpm
    MD5: c089e63e91d220f792b42b8b7bf8fc6b
    SHA-256: 77e2d4d9e52d4b24b32075a5ee7ee4ee798647fc38d0a0396feb90b59ca378bd
    Size: 72.45 kB
  2. nss-util-devel-3.28.4-1.0.el7.x86_64.rpm
    MD5: 0c144acde2600e7ef94758191d3d1c91
    SHA-256: adf3c10b2d99a9fdfcb963508ae8f5793c3d8b69c7ea4a1bc86fb4829286ef2e
    Size: 70.23 kB
  3. nss-util-3.28.4-1.0.el7.i686.rpm
    MD5: ac49fd1911bc1a9fdba72933410de7da
    SHA-256: 454d8d8ab48b6e114597bd49e167958010402fc750f4f3625436151d42f8a8b5
    Size: 71.03 kB
  4. nss-util-devel-3.28.4-1.0.el7.i686.rpm
    MD5: 62660d323d86d9f5506aea367bd0ed2c
    SHA-256: 33cfb83f8b3fcd25afff17318fe84a6446e63f51096482896b02b35b955ca78a
    Size: 70.28 kB
  5. nss-3.28.4-1.0.el7.x86_64.rpm
    MD5: 34f8b654c74d27101bb3c65aeab3d8a2
    SHA-256: 002482bf6a1de647ec3b770a7cdd82f61274bd23b93d365d6c536c00b57a5bc0
    Size: 872.41 kB
  6. nss-devel-3.28.4-1.0.el7.x86_64.rpm
    MD5: 4b116850ba2d5e1daf8cfaaace34cafc
    SHA-256: 3f57215e427e3a1b41534cbc5cf68b4fa15ae02542a49ae43015fe62b7c3e0ac
    Size: 216.21 kB
  7. nss-sysinit-3.28.4-1.0.el7.x86_64.rpm
    MD5: 5663e9250e57f817f89c9afb30037e50
    SHA-256: 1215d9fad94f3b2388f4e72f35ca53b8840050948d0aa3791b96c2d3ca6cdfa4
    Size: 57.18 kB
  8. nss-tools-3.28.4-1.0.el7.x86_64.rpm
    MD5: 93b4d8bfab22fdfaed2ce4d3118cc362
    SHA-256: 87a16b1cfbb91a417a310c0003d976010ce89da22eef425237b636c6716813c7
    Size: 495.08 kB
  9. nss-3.28.4-1.0.el7.i686.rpm
    MD5: 5969abbffa31c9e789b25efdc4c9908e
    SHA-256: 5bc7b853bde9582d1d2ee0bec5a8133bf0e1209f50e1ee0672eaa79eb6e82f4d
    Size: 870.94 kB
  10. nss-devel-3.28.4-1.0.el7.i686.rpm
    MD5: db4dd589d431e235c61ddcee45d3a4d5
    SHA-256: d87eb5a7ba3ba745fe57b5395beaa7fd8e63914372044f7d861ecf1a3c8c6cba
    Size: 217.66 kB