[El-errata] ELEA-2019-3280 Oracle Linux 6 nss, nss-softokn, nss-util and nspr bug fix and enhancement update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Mon Nov 4 10:05:18 PST 2019


Oracle Linux Enhancement Advisory ELEA-2019-3280

http://linux.oracle.com/errata/ELEA-2019-3280.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
nspr-4.21.0-1.el6_10.i686.rpm
nspr-devel-4.21.0-1.el6_10.i686.rpm
nss-3.44.0-7.0.1.el6_10.i686.rpm
nss-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-pkcs11-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-softokn-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-sysinit-3.44.0-7.0.1.el6_10.i686.rpm
nss-tools-3.44.0-7.0.1.el6_10.i686.rpm
nss-util-3.44.0-1.el6_10.i686.rpm
nss-util-devel-3.44.0-1.el6_10.i686.rpm

x86_64:
nspr-4.21.0-1.el6_10.i686.rpm
nspr-4.21.0-1.el6_10.x86_64.rpm
nspr-devel-4.21.0-1.el6_10.i686.rpm
nspr-devel-4.21.0-1.el6_10.x86_64.rpm
nss-3.44.0-7.0.1.el6_10.i686.rpm
nss-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-devel-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-pkcs11-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-pkcs11-devel-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-softokn-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-softokn-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-devel-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-softokn-freebl-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-softokn-freebl-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-devel-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-sysinit-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-tools-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-util-3.44.0-1.el6_10.i686.rpm
nss-util-3.44.0-1.el6_10.x86_64.rpm
nss-util-devel-3.44.0-1.el6_10.i686.rpm
nss-util-devel-3.44.0-1.el6_10.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/nspr-4.21.0-1.el6_10.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/nss-3.44.0-7.0.1.el6_10.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/nss-softokn-3.44.0-5.0.1.el6_10.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/nss-util-3.44.0-1.el6_10.src.rpm



Description of changes:

nspr
[4.21.0-1]
- Rebase to NSPR 4.21

nss
[3.44.0-7.0.1]
- Added nss-vendor.patch to change vendor
- Temporarily disable some tests until expired PayPalEE.cert is renewed

[3.44.0-7]
- Add back missing Mozilla Policy

[3.44.0-6]
- Fix gtest failure detection

[3.44.0-5]
- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default

[3.44.0-4]
- Fix cipher order
- fix broken gtests

[3.44.0-3]
- fix problems found by qe:
- AC13: SSL3 "disabled"
- AC26: Chacha20 and TLS 1.3 ciphers should be prioritized
-   SHA-384 PRF => *_256_GCM_SHA384 ciphers should be reenabled for 
consistency
- AC28: nss-policy-check is missing from packages and $PATH
- extra: apostrophes in certutil manpage got mangled

[3.44.0-2]
- restore Conflicts: with curl

[3.44.0-1]
- Rebase to 3.44.0 with critical fixes

nss-softokn
[3.44.0-5.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
- Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 
26617866],
   [Orabug 26617833], [Orabug 26617780]

[3.44.0-5]
- include sqlite3_open_v2 in the patch

[3.44.0-4]
- actually turn on the old sqlite patch

[3.44.0-3]
- add back old sqlite patch

[3.44.0-2]
- add back add-relro patch

[3.44.0-1]
- Rebase for Firefox
- Resolves Bug 1743628

nss-util
[3.44.0-1]
- Rebase to NSS 3.44.0 for Firefox 68




More information about the El-errata mailing list