[El-errata] ELEA-2018-1376 Oracle Linux 7 nspr, nss-util, nss-softokn, and nss bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Enhancement Advisory ELEA-2018-1376

http://linux.oracle.com/errata/ELEA-2018-1376.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
nspr-4.19.0-1.el7_5.i686.rpm
nspr-4.19.0-1.el7_5.x86_64.rpm
nspr-devel-4.19.0-1.el7_5.i686.rpm
nspr-devel-4.19.0-1.el7_5.x86_64.rpm
nss-3.36.0-5.el7_5.i686.rpm
nss-3.36.0-5.el7_5.x86_64.rpm
nss-devel-3.36.0-5.el7_5.i686.rpm
nss-devel-3.36.0-5.el7_5.x86_64.rpm
nss-pkcs11-devel-3.36.0-5.el7_5.i686.rpm
nss-pkcs11-devel-3.36.0-5.el7_5.x86_64.rpm
nss-softokn-3.36.0-5.0.1.el7_5.i686.rpm
nss-softokn-3.36.0-5.0.1.el7_5.x86_64.rpm
nss-softokn-devel-3.36.0-5.0.1.el7_5.i686.rpm
nss-softokn-devel-3.36.0-5.0.1.el7_5.x86_64.rpm
nss-softokn-freebl-3.36.0-5.0.1.el7_5.i686.rpm
nss-softokn-freebl-3.36.0-5.0.1.el7_5.x86_64.rpm
nss-softokn-freebl-devel-3.36.0-5.0.1.el7_5.i686.rpm
nss-softokn-freebl-devel-3.36.0-5.0.1.el7_5.x86_64.rpm
nss-sysinit-3.36.0-5.el7_5.x86_64.rpm
nss-tools-3.36.0-5.el7_5.x86_64.rpm
nss-util-3.36.0-1.el7_5.i686.rpm
nss-util-3.36.0-1.el7_5.x86_64.rpm
nss-util-devel-3.36.0-1.el7_5.i686.rpm
nss-util-devel-3.36.0-1.el7_5.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/nspr-4.19.0-1.el7_5.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/nss-3.36.0-5.el7_5.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/nss-softokn-3.36.0-5.0.1.el7_5.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/nss-util-3.36.0-1.el7_5.src.rpm



Description of changes:

nspr
[4.19.0-1]
- Rebase to NSPR 4.19

[4.19.0-0.1.beta]
- Rebase to NSPR 4.19 BETA

nss
[3.36.0-5]
- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h

[3.36.0-4]
- Work around modutil -changepw error if the old and new passwords are
   both empty in FIPS mode

[3.36.0-3]
- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running

[3.36.0-2]
- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type

[3.36.0-1]
- Rebase to NSS 3.36

nss-softokn
[3.36.0-5.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug 26679337]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 
26617814],
   [Orabug 26617879], [Orabug 26617849]
- Add fips140-2 ECDSA Known Answer Test fix [Orabug 26679353]

[3.36.0-5]
- Use correct tarball of NSS 3.36.0 release

[3.36.0-4]
- Clear AES key information after use

[3.36.0-3]
- Revert the default behavior change in filesystem probes

[3.36.0-2]
- Add KAS tests to fipstest

[3.36.0-1]
- Update to NSS 3.36.0

[3.36.0-0.3.beta]
- Apply upstream patch likely to be part of the official release

[3.36.0-0.2.beta]
- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
   support for single DES mechanisms

[3.36.0-0.1.beta]
- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch

nss-util
[3.36.0-1]
- Rebase to NSS 3.36

[3.36.0-0.1.beta]
- Rebase to NSS 3.36 BETA