nss-3.44.0-7.0.1.AXS4
エラータID: AXSA:2021-1747:04
リリース日:
2021/05/17 Monday - 06:38
題名:
nss-3.44.0-7.0.1.AXS4
影響のあるチャネル:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- NSS には、TLS 1.3 での CCS(ChangeCipherSpec) メッセージの取り扱いに問題があり、リモートの攻撃者が
複数のCCSメッセージを送ることを許可し、NSS ライブラリを使ってコンパイルされているサーバー用サービスの
サービス拒否を引き起こす脆弱性があります。(CVE-2020-25648)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2020-25648
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
追加情報:
N/A
ダウンロード:
SRPMS
- nss-3.44.0-7.0.1.AXS4.src.rpm
MD5: 8531e82d65d90d63aa5290b4c1653a10
SHA-256: dd20577ff56064abb5cbb49f6dd516f8a3cc9d26c15f4263406058a403682ece
Size: 22.56 MB
Asianux Server 4 for x86
- nss-3.44.0-7.0.1.AXS4.i686.rpm
MD5: edb8685095d001b44987a0b8c49c0877
SHA-256: b70d2a4f6227118f00e9d52ef36deb19af69736dc8ab754d75d43ecc9c22c3cf
Size: 888.70 kB - nss-devel-3.44.0-7.0.1.AXS4.i686.rpm
MD5: fb3d7c31210ff7be685418d7b0ff4c98
SHA-256: b5b0e21f804b30207da0ac580f3d1044a209fc4353ff1dedb8d809b5975e89b6
Size: 227.18 kB - nss-sysinit-3.44.0-7.0.1.AXS4.i686.rpm
MD5: 48e1d08e709a1ccca0b059f3491598a0
SHA-256: da19dfb4e71f0363a379b70e624f7134f03ef4293f7c0447609e815103f361ab
Size: 53.36 kB - nss-tools-3.44.0-7.0.1.AXS4.i686.rpm
MD5: 9f1845977efc2600c48bb3c828c7dc8d
SHA-256: 0da5a0396d3bab2eeabd66543b7aa23f6ee13b35ea726b49372c4e1654555410
Size: 482.25 kB
Asianux Server 4 for x86_64
- nss-3.44.0-7.0.1.AXS4.x86_64.rpm
MD5: 8cafd91d1db70a05db5291ec2bbdb134
SHA-256: 4e5b792de53026cbb2d9e92fe9c1cb95ae71dbd1592aaf2927d00ca9a288e313
Size: 881.87 kB - nss-devel-3.44.0-7.0.1.AXS4.x86_64.rpm
MD5: b5abec5967f95db65c17d1083da6196c
SHA-256: 0de6a7672dad64dcf06a00473d7da9304450e2e66d4b13920ea27b435155fcb7
Size: 225.31 kB - nss-sysinit-3.44.0-7.0.1.AXS4.x86_64.rpm
MD5: c455f5884ac3c649d751dcc5d8e53ebd
SHA-256: 34c3671bdf34038d385cb5526b44d5c596e907a38fb5f746b58c2f44756a6b6a
Size: 52.96 kB - nss-tools-3.44.0-7.0.1.AXS4.x86_64.rpm
MD5: 580ccf50bfa2d18baadc1a188441b5a3
SHA-256: 082104913d5288a6d1b04ffd3f14b6e59fc59375938bc0088c1f66cf328f0b94
Size: 470.92 kB - nss-3.44.0-7.0.1.AXS4.i686.rpm
MD5: edb8685095d001b44987a0b8c49c0877
SHA-256: b70d2a4f6227118f00e9d52ef36deb19af69736dc8ab754d75d43ecc9c22c3cf
Size: 888.70 kB - nss-devel-3.44.0-7.0.1.AXS4.i686.rpm
MD5: fb3d7c31210ff7be685418d7b0ff4c98
SHA-256: b5b0e21f804b30207da0ac580f3d1044a209fc4353ff1dedb8d809b5975e89b6
Size: 227.18 kB