[El-errata] ELBA-2026-57199 Oracle Linux 9 nss bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2026-57199

http://linux.oracle.com/errata/ELBA-2026-57199.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nspr-4.39.0-5.el9_6.i686.rpm
nspr-4.39.0-5.el9_6.x86_64.rpm
nspr-devel-4.39.0-5.el9_6.i686.rpm
nspr-devel-4.39.0-5.el9_6.x86_64.rpm
nss-3.124.0-5.el9_6.i686.rpm
nss-3.124.0-5.el9_6.x86_64.rpm
nss-devel-3.124.0-5.el9_6.i686.rpm
nss-devel-3.124.0-5.el9_6.x86_64.rpm
nss-softokn-3.124.0-5.el9_6.i686.rpm
nss-softokn-3.124.0-5.el9_6.x86_64.rpm
nss-softokn-devel-3.124.0-5.el9_6.i686.rpm
nss-softokn-devel-3.124.0-5.el9_6.x86_64.rpm
nss-softokn-freebl-3.124.0-5.el9_6.i686.rpm
nss-softokn-freebl-3.124.0-5.el9_6.x86_64.rpm
nss-softokn-freebl-devel-3.124.0-5.el9_6.i686.rpm
nss-softokn-freebl-devel-3.124.0-5.el9_6.x86_64.rpm
nss-sysinit-3.124.0-5.el9_6.x86_64.rpm
nss-tools-3.124.0-5.el9_6.x86_64.rpm
nss-util-3.124.0-5.el9_6.i686.rpm
nss-util-3.124.0-5.el9_6.x86_64.rpm
nss-util-devel-3.124.0-5.el9_6.i686.rpm
nss-util-devel-3.124.0-5.el9_6.x86_64.rpm

aarch64:
nspr-4.39.0-5.el9_6.aarch64.rpm
nspr-devel-4.39.0-5.el9_6.aarch64.rpm
nss-3.124.0-5.el9_6.aarch64.rpm
nss-devel-3.124.0-5.el9_6.aarch64.rpm
nss-softokn-3.124.0-5.el9_6.aarch64.rpm
nss-softokn-devel-3.124.0-5.el9_6.aarch64.rpm
nss-softokn-freebl-3.124.0-5.el9_6.aarch64.rpm
nss-softokn-freebl-devel-3.124.0-5.el9_6.aarch64.rpm
nss-sysinit-3.124.0-5.el9_6.aarch64.rpm
nss-tools-3.124.0-5.el9_6.aarch64.rpm
nss-util-3.124.0-5.el9_6.aarch64.rpm
nss-util-devel-3.124.0-5.el9_6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/nss-3.124.0-5.el9_6.src.rpm



Description of changes:

[3.124.0-5]
- fix pss issues (again)

[3.124.0-4]
- fix pkcs12 defaults
- fix pss issues

[3.124.0-3]
- drop crmf

[3.124.0-2]
- rebase fixes
- restore rhel-9 dropping of pkcs12 and smime policy
- restore mlkem aliases
- add mlkem key lengths to the mechanism info
- fix crash if you try to encapsulate with an unimported
  public key
- restore distrusted certs to certdata.txt even though we
  never reference them to make tests happy.

[3.124.0-1]
- rebase to upstream NSS 3.124
- backport ml-dsa support that is not upstream yet.
- pick up in process patches upstream including eddsa