nss-3.28.4-3.AXS4

エラータID: AXSA:2017-1683:01

リリース日: 
2017/05/30 Tuesday - 14:41
題名: 
nss-3.28.4-3.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- NSS には，サーバが空の SSLv2 メッセージを受け取った場合，ヌルポイ
ンタデリファレンス脆弱性が存在し，リモートの攻撃者がサービス拒否を引
き起こす脆弱性があります。(CVE-2017-7502)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2017-7502
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. nss-3.28.4-3.AXS4.src.rpm
    MD5: 9c6df22ac8a3d2d27c8a2d083505377d
    SHA-256: 359361284406f238db468fadcec3542893e75b7d7facdf8b5fc9a4a947731b31
    Size: 7.26 MB

Asianux Server 4 for x86
  1. nss-3.28.4-3.AXS4.i686.rpm
    MD5: 81e9ec3239f18784c267503e8ce263a8
    SHA-256: dea4da5f560fe675fbe02cc4cea97b1d7b01a6c40c49f78eaf9a68461b530a04
    Size: 881.47 kB
  2. nss-devel-3.28.4-3.AXS4.i686.rpm
    MD5: dba6bf773a55837744ba3854cdb99903
    SHA-256: 08db92365ab6e7117b8b5569d448dd8e0765e151a900e91698fcd267b042ea75
    Size: 212.60 kB
  3. nss-sysinit-3.28.4-3.AXS4.i686.rpm
    MD5: 37efa1f17fc3149c19f3d63bc1fc2d2b
    SHA-256: b80d9418d1ade3ceff5260debe558095482696632f772ad26e19cb5f4210a1fa
    Size: 50.63 kB
  4. nss-tools-3.28.4-3.AXS4.i686.rpm
    MD5: bc657e44e0b18f8e79ebd83a60d62ed5
    SHA-256: d9db6500dd3c78d2b2770cca81af2e1488ea73ab0b9209d77edc34694af2336d
    Size: 453.11 kB

Asianux Server 4 for x86_64
  1. nss-3.28.4-3.AXS4.x86_64.rpm
    MD5: 3c58f8f4842239bc1c6508519db233dd
    SHA-256: 96a9ac315181d7c1953cea40c768dc0b50f3be9b94d95a185acf125982949313
    Size: 878.29 kB
  2. nss-devel-3.28.4-3.AXS4.x86_64.rpm
    MD5: 986b007d2121abe173a2126291390487
    SHA-256: b4ba18f1ef826ec772e74033aa694b080ee89884f5f44dc55707ce105f3fc0ae
    Size: 210.73 kB
  3. nss-sysinit-3.28.4-3.AXS4.x86_64.rpm
    MD5: d92e5c565d6c8e67fd1b5ff86ca907ec
    SHA-256: c950fc9e0b1a7318fc1f60d52ba661b73689f305f7c1fbcaa3cc8bc74a856e2c
    Size: 50.25 kB
  4. nss-tools-3.28.4-3.AXS4.x86_64.rpm
    MD5: 2cfac147d0893696344597406b0fdc81
    SHA-256: bd3cd3e3ad930914bfd3f1480c18647387920b15239326b6a882af8f1206bd8c
    Size: 445.61 kB
  5. nss-3.28.4-3.AXS4.i686.rpm
    MD5: 81e9ec3239f18784c267503e8ce263a8
    SHA-256: dea4da5f560fe675fbe02cc4cea97b1d7b01a6c40c49f78eaf9a68461b530a04
    Size: 881.47 kB
  6. nss-devel-3.28.4-3.AXS4.i686.rpm
    MD5: dba6bf773a55837744ba3854cdb99903
    SHA-256: 08db92365ab6e7117b8b5569d448dd8e0765e151a900e91698fcd267b042ea75
    Size: 212.60 kB