nss-3.16.1-7.AXS4, nss-util-3.16.1-2.AXS4, nss-softokn-3.14.3-12.AXS4

エラータID: AXSA:2014-572:03

リリース日: 
2014/10/01 Wednesday - 16:25
題名: 
nss-3.16.1-7.AXS4, nss-util-3.16.1-2.AXS4, nss-softokn-3.14.3-12.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- nss は X.509 認証の ASN.1 値を適切にパースしておらず，巧妙に細工された証明書によって，リモートの攻撃者が RSA 署名になりすましやすくする脆弱性があります。 (CVE-2014-1568)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2014-1568
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. nss-softokn-3.14.3-12.AXS4.src.rpm
    MD5: 28c1cccd0fab71e08a0a5db22552047a
    SHA-256: 63ca9700c1a84a531e1446ac1c69ef38179584f92cde79d235d4e84c44b17054
    Size: 1.22 MB
  2. nss-util-3.16.1-2.AXS4.src.rpm
    MD5: b4c7ecc3ae711239fc60c1248f17fda4
    SHA-256: 933cb5753f96e49fd04d6f737eddcf451b4acd175081d5f5f26af4682dfd1530
    Size: 337.51 kB
  3. nss-3.16.1-7.AXS4.src.rpm
    MD5: d8718a4d0357a3335cf7216c302b919f
    SHA-256: 79bc01ea780083ded0ec74624f35da28967f9158940d4816f7912cf1ee963efe
    Size: 4.90 MB

Asianux Server 4 for x86
  1. nss-softokn-3.14.3-12.AXS4.i686.rpm
    MD5: 1aeb45615d5fb4153e0a7619d5086925
    SHA-256: fd128c5311d2d35cf29c4bacc206130568f072c7e0bd2edb97e04e15f92bab11
    Size: 272.36 kB
  2. nss-softokn-devel-3.14.3-12.AXS4.i686.rpm
    MD5: 48c95f0e2404e60d0641f89ad4a26736
    SHA-256: a10c4f22aa3ff1ff29a65be9f1e6e88f0ef969ccc49799609a4c29af9f56f38a
    Size: 12.31 kB
  3. nss-softokn-freebl-3.14.3-12.AXS4.i686.rpm
    MD5: 6d156d86db89450006d6c41404ecdefb
    SHA-256: 261b9b93406e8516449788b10c90b2dc1f6dd03bc8cab5f7aae7e63b0315a6f4
    Size: 147.00 kB
  4. nss-softokn-freebl-devel-3.14.3-12.AXS4.i686.rpm
    MD5: d9e414b89207a72367bb4764d407d9a4
    SHA-256: c7aa3fd586376002d75f7ed28d881b66e90479becb8a3185241dd066dd915d0b
    Size: 29.04 kB
  5. nss-util-3.16.1-2.AXS4.i686.rpm
    MD5: 225b0bbefbaa0725a874ba63ee77bdc1
    SHA-256: 722b5e825eae17d11e2fe41ee5c9390173202e0feb6f02ce760218e4de3330a8
    Size: 63.95 kB
  6. nss-util-devel-3.16.1-2.AXS4.i686.rpm
    MD5: 68a36ef649581602b3b8c7c605561af3
    SHA-256: 85611d8525c91acc0a18db3a3c84d2c06fca53b637cd4f3ab0ec728a6337ad24
    Size: 66.25 kB
  7. nss-3.16.1-7.AXS4.i686.rpm
    MD5: 1b61cd2800c4eebcc0ea80b06bbfe7ab
    SHA-256: f8166cb33c082d88704fd80b5e89dd85d6dc73d01a1b52a482af77d9ea14facc
    Size: 835.71 kB
  8. nss-devel-3.16.1-7.AXS4.i686.rpm
    MD5: db4c7c4fc4456d156591995317739d90
    SHA-256: 62ba2efb4b16adc202a045c53a6a56b82fa4ec66636cf906e318da0b8564350c
    Size: 192.54 kB
  9. nss-sysinit-3.16.1-7.AXS4.i686.rpm
    MD5: 8944252dcbb85950d00068e8e1c4967d
    SHA-256: b45fc3ca42467b9df692350ddbb1661b5ceb11efc8395e686a263e649144ae41
    Size: 40.70 kB
  10. nss-tools-3.16.1-7.AXS4.i686.rpm
    MD5: be06647708d76639386649a4ae281f18
    SHA-256: ad95072753cf417a5dc8aa7540125d28ff930eb7278717878b27cc3431fc3041
    Size: 368.25 kB

Asianux Server 4 for x86_64
  1. nss-softokn-3.14.3-12.AXS4.x86_64.rpm
    MD5: 91dba54bdab8b8d5eb773cb3566adec9
    SHA-256: 347512621286f76da71cb117709f25fa9af4df74890cb15a4f3c854f98f00839
    Size: 264.37 kB
  2. nss-softokn-devel-3.14.3-12.AXS4.x86_64.rpm
    MD5: 564ac374a2a2c342a2023485084a2bd6
    SHA-256: 40398c5c4355c5d3b5181ea49631f20dae9c1e43bad278560b99836c03b0dc9d
    Size: 11.88 kB
  3. nss-softokn-freebl-3.14.3-12.AXS4.x86_64.rpm
    MD5: f7b10fc1ac2aa2241e469decd25909b6
    SHA-256: f4df488e6158c7ccdda6c65b4db8db28f484143ac90e0bc3ee00c49af22bc9da
    Size: 156.71 kB
  4. nss-softokn-freebl-devel-3.14.3-12.AXS4.x86_64.rpm
    MD5: ef0fc4476d5900c7d1cd9816a3b9f0f8
    SHA-256: 11b982802dca056aa55d95f4f97618200fc842e8ea7a909d1499dd1764c6e6f4
    Size: 28.51 kB
  5. nss-softokn-3.14.3-12.AXS4.i686.rpm
    MD5: 1aeb45615d5fb4153e0a7619d5086925
    SHA-256: fd128c5311d2d35cf29c4bacc206130568f072c7e0bd2edb97e04e15f92bab11
    Size: 272.36 kB
  6. nss-softokn-devel-3.14.3-12.AXS4.i686.rpm
    MD5: 48c95f0e2404e60d0641f89ad4a26736
    SHA-256: a10c4f22aa3ff1ff29a65be9f1e6e88f0ef969ccc49799609a4c29af9f56f38a
    Size: 12.31 kB
  7. nss-softokn-freebl-3.14.3-12.AXS4.i686.rpm
    MD5: 6d156d86db89450006d6c41404ecdefb
    SHA-256: 261b9b93406e8516449788b10c90b2dc1f6dd03bc8cab5f7aae7e63b0315a6f4
    Size: 147.00 kB
  8. nss-softokn-freebl-devel-3.14.3-12.AXS4.i686.rpm
    MD5: d9e414b89207a72367bb4764d407d9a4
    SHA-256: c7aa3fd586376002d75f7ed28d881b66e90479becb8a3185241dd066dd915d0b
    Size: 29.04 kB
  9. nss-util-3.16.1-2.AXS4.x86_64.rpm
    MD5: 3359c4d8774e73a0d09cd22967a44679
    SHA-256: 534a759b84166a31be2ab873dad738a7a4908c9dec76505ab997c5ac77e9f5ab
    Size: 63.91 kB
  10. nss-util-devel-3.16.1-2.AXS4.x86_64.rpm
    MD5: 622a052c661e76cbfa14240809751c51
    SHA-256: 4f60c8a3e6083a26dc9e93b1e6674c6242cba901b8fbdb98dca53d136dcd631e
    Size: 65.81 kB
  11. nss-util-3.16.1-2.AXS4.i686.rpm
    MD5: 225b0bbefbaa0725a874ba63ee77bdc1
    SHA-256: 722b5e825eae17d11e2fe41ee5c9390173202e0feb6f02ce760218e4de3330a8
    Size: 63.95 kB
  12. nss-util-devel-3.16.1-2.AXS4.i686.rpm
    MD5: 68a36ef649581602b3b8c7c605561af3
    SHA-256: 85611d8525c91acc0a18db3a3c84d2c06fca53b637cd4f3ab0ec728a6337ad24
    Size: 66.25 kB
  13. nss-3.16.1-7.AXS4.x86_64.rpm
    MD5: 3233c7b997c7863f72a6f3fca3372e30
    SHA-256: 84e4a6f0517c2e3fea1c859e88ff8a892511cdbd9cd7fa1c829108101a7ae1ae
    Size: 831.61 kB
  14. nss-devel-3.16.1-7.AXS4.x86_64.rpm
    MD5: f7c58960da2d01bc5d705fdfc180c08e
    SHA-256: 22519c37efc6a4e2ec9c3117282238a8d440ddd342ab169cdf3cbbeb72708dc0
    Size: 190.70 kB
  15. nss-sysinit-3.16.1-7.AXS4.x86_64.rpm
    MD5: 7b5d8df0d23db687ff9c7f2d5202a50a
    SHA-256: 190d5b5a3fba2f676b174117486f8c4cd60837a6ea181f05f633a2eaf8044d45
    Size: 40.32 kB
  16. nss-tools-3.16.1-7.AXS4.x86_64.rpm
    MD5: 0502385411a820166736eeee9f305919
    SHA-256: 806c8179e76ca8eae7ceca7b91b082bb0f187f4f4b31aac0f20b05f2fb5ecb37
    Size: 359.63 kB
  17. nss-3.16.1-7.AXS4.i686.rpm
    MD5: 1b61cd2800c4eebcc0ea80b06bbfe7ab
    SHA-256: f8166cb33c082d88704fd80b5e89dd85d6dc73d01a1b52a482af77d9ea14facc
    Size: 835.71 kB
  18. nss-devel-3.16.1-7.AXS4.i686.rpm
    MD5: db4c7c4fc4456d156591995317739d90
    SHA-256: 62ba2efb4b16adc202a045c53a6a56b82fa4ec66636cf906e318da0b8564350c
    Size: 192.54 kB