[Oraclevm-errata] OVMSA-2014-0082 Important: Oracle VM 3.3 nss security update

Errata Announcements for Oracle VM oraclevm-errata at oss.oracle.com
Wed Dec 10 18:16:20 PST 2014


Oracle VM Security Advisory OVMSA-2014-0082

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
nss-3.16.2.3-3.0.1.el6_6.x86_64.rpm
nss-sysinit-3.16.2.3-3.0.1.el6_6.x86_64.rpm
nss-tools-3.16.2.3-3.0.1.el6_6.x86_64.rpm
nss-util-3.16.2.3-2.el6_6.x86_64.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/nss-3.16.2.3-3.0.1.el6_6.src.rpm
http://oss.oracle.com/oraclevm/server/3.3/SRPMS-updates/nss-util-3.16.2.3-2.el6_6.src.rpm



Description of changes:

nss
[3.16.2.3-3.0.1.el6_6]
- Added nss-vendor.patch to change vendor

[3.16.2.3-3]
- Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
- Remove unused indentation pseudo patch
- require nss util 3.16.2.3

[3.16.2.3-2]
- Restore patch for certutil man page
- supply missing options descriptions to the man page
- Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3

[3.16.1-15]
- Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
- Support TLS_FALLBACK_SCSV in tstclnt and ssltap

[3.16.1-14]
- Resolves: Bug 1145432 - CVE-2014-1568

[3.16.1-13]
- Fix pem deadlock caused by previous version of a fix for a race condition
- Fixes: Bug 1090681

[3.16.1-12]
- Add references to bugs filed upstream
- Related: Bug 1090681, Bug 1104300

[3.16.1-11]
- Resolves: Bug 1090681 - RHDS 9.1 389-ds-base-1.2.11.15-31 crash in 
PK11_DoesMechanism

[3.16.1-10]
- Replace expired PayPal test certificate that breaks the build
- Related: Bug 1099619

[3.16.1-9]
- Fix defects found by coverity
- Resolves: Bug 1104300

[3.16.1-8]
- Backport nss-3.12.6 upstream fix required by Firefox 31
- Resolves: Bug 1099619

nss-util
[3.16.2.3-2]
- Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
- Fix the required nspr version to be 4.10.6



More information about the Oraclevm-errata mailing list