RLBA-2024:11397

Synopsis

nss bug fix and enhancement update

Description

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Bug Fix(es) and Enhancement(s):

* shlibsign is broken in FIPS mode (JIRA:Rocky Linux-61294)

* shlibsign is broken in FIPS mode [rhel-9.4.z] (JIRA:Rocky Linux-61295)

* shlibsign is broken in FIPS mode [rhel-9.5.z] (JIRA:Rocky Linux-61296)

* nss-softokn pkg-config file still lists libdbm3 (JIRA:Rocky Linux-61300)

* nss-softokn pkg-config file still lists libdbm3 [rhel-9.4.z] (JIRA:Rocky Linux-61301)

* nss-softokn pkg-config file still lists libdbm3 [rhel-9.5.z] (JIRA:Rocky Linux-61302)

* Incorrect indicators for ECDH (JIRA:Rocky Linux-59580)

* Incorrect indicators for ECDH [rhel-9.4.z] (JIRA:Rocky Linux-59581)

* Incorrect indicators for ECDH [rhel-9.5.z] (JIRA:Rocky Linux-59582)

* NSS FIPS service indicators mark RSA-OAEP as unapproved (JIRA:Rocky Linux-61272)

* NSS FIPS service indicators mark RSA-OAEP as unapproved [rhel-9.4.z] (JIRA:Rocky Linux-61273)

* NSS FIPS service indicators mark RSA-OAEP as unapproved [rhel-9.5.z] (JIRA:Rocky Linux-61274)

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

CVEs

Affected packages

Rocky Linux 9 aarch64 - AppStream

nspr-0:4.35.0-17.el9_5.aarch64.rpm nspr-debuginfo-0:4.35.0-17.el9_5.aarch64.rpm nspr-devel-0:4.35.0-17.el9_5.aarch64.rpm nss-0:3.101.0-10.el9_5.aarch64.rpm nss-0:3.101.0-10.el9_5.src.rpm nss-debuginfo-0:3.101.0-10.el9_5.aarch64.rpm nss-debugsource-0:3.101.0-10.el9_5.aarch64.rpm nss-devel-0:3.101.0-10.el9_5.aarch64.rpm nss-softokn-0:3.101.0-10.el9_5.aarch64.rpm nss-softokn-debuginfo-0:3.101.0-10.el9_5.aarch64.rpm nss-softokn-devel-0:3.101.0-10.el9_5.aarch64.rpm nss-softokn-freebl-0:3.101.0-10.el9_5.aarch64.rpm nss-softokn-freebl-debuginfo-0:3.101.0-10.el9_5.aarch64.rpm nss-softokn-freebl-devel-0:3.101.0-10.el9_5.aarch64.rpm nss-sysinit-0:3.101.0-10.el9_5.aarch64.rpm nss-sysinit-debuginfo-0:3.101.0-10.el9_5.aarch64.rpm nss-tools-0:3.101.0-10.el9_5.aarch64.rpm nss-tools-debuginfo-0:3.101.0-10.el9_5.aarch64.rpm nss-util-0:3.101.0-10.el9_5.aarch64.rpm nss-util-debuginfo-0:3.101.0-10.el9_5.aarch64.rpm nss-util-devel-0:3.101.0-10.el9_5.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

nspr-0:4.35.0-17.el9_5.i686.rpm nspr-0:4.35.0-17.el9_5.x86_64.rpm nspr-debuginfo-0:4.35.0-17.el9_5.x86_64.rpm nspr-devel-0:4.35.0-17.el9_5.i686.rpm nspr-devel-0:4.35.0-17.el9_5.x86_64.rpm nss-0:3.101.0-10.el9_5.i686.rpm nss-0:3.101.0-10.el9_5.src.rpm nss-0:3.101.0-10.el9_5.x86_64.rpm nss-debuginfo-0:3.101.0-10.el9_5.x86_64.rpm nss-debugsource-0:3.101.0-10.el9_5.x86_64.rpm nss-devel-0:3.101.0-10.el9_5.i686.rpm nss-devel-0:3.101.0-10.el9_5.x86_64.rpm nss-softokn-0:3.101.0-10.el9_5.i686.rpm nss-softokn-0:3.101.0-10.el9_5.x86_64.rpm nss-softokn-debuginfo-0:3.101.0-10.el9_5.x86_64.rpm nss-softokn-devel-0:3.101.0-10.el9_5.i686.rpm nss-softokn-devel-0:3.101.0-10.el9_5.x86_64.rpm nss-softokn-freebl-0:3.101.0-10.el9_5.i686.rpm nss-softokn-freebl-0:3.101.0-10.el9_5.x86_64.rpm nss-softokn-freebl-debuginfo-0:3.101.0-10.el9_5.x86_64.rpm nss-softokn-freebl-devel-0:3.101.0-10.el9_5.i686.rpm nss-softokn-freebl-devel-0:3.101.0-10.el9_5.x86_64.rpm nss-sysinit-0:3.101.0-10.el9_5.x86_64.rpm nss-sysinit-debuginfo-0:3.101.0-10.el9_5.x86_64.rpm nss-tools-0:3.101.0-10.el9_5.x86_64.rpm nss-tools-debuginfo-0:3.101.0-10.el9_5.x86_64.rpm nss-util-0:3.101.0-10.el9_5.i686.rpm nss-util-0:3.101.0-10.el9_5.x86_64.rpm nss-util-debuginfo-0:3.101.0-10.el9_5.x86_64.rpm nss-util-devel-0:3.101.0-10.el9_5.i686.rpm nss-util-devel-0:3.101.0-10.el9_5.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

nspr-0:4.35.0-17.el9_5.ppc64le.rpm nspr-debuginfo-0:4.35.0-17.el9_5.ppc64le.rpm nspr-devel-0:4.35.0-17.el9_5.ppc64le.rpm nss-0:3.101.0-10.el9_5.ppc64le.rpm nss-0:3.101.0-10.el9_5.src.rpm nss-debuginfo-0:3.101.0-10.el9_5.ppc64le.rpm nss-debugsource-0:3.101.0-10.el9_5.ppc64le.rpm nss-devel-0:3.101.0-10.el9_5.ppc64le.rpm nss-softokn-0:3.101.0-10.el9_5.ppc64le.rpm nss-softokn-debuginfo-0:3.101.0-10.el9_5.ppc64le.rpm nss-softokn-devel-0:3.101.0-10.el9_5.ppc64le.rpm nss-softokn-freebl-0:3.101.0-10.el9_5.ppc64le.rpm nss-softokn-freebl-debuginfo-0:3.101.0-10.el9_5.ppc64le.rpm nss-softokn-freebl-devel-0:3.101.0-10.el9_5.ppc64le.rpm nss-sysinit-0:3.101.0-10.el9_5.ppc64le.rpm nss-sysinit-debuginfo-0:3.101.0-10.el9_5.ppc64le.rpm nss-tools-0:3.101.0-10.el9_5.ppc64le.rpm nss-tools-debuginfo-0:3.101.0-10.el9_5.ppc64le.rpm nss-util-0:3.101.0-10.el9_5.ppc64le.rpm nss-util-debuginfo-0:3.101.0-10.el9_5.ppc64le.rpm nss-util-devel-0:3.101.0-10.el9_5.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

nspr-0:4.35.0-17.el9_5.s390x.rpm nspr-debuginfo-0:4.35.0-17.el9_5.s390x.rpm nspr-devel-0:4.35.0-17.el9_5.s390x.rpm nss-0:3.101.0-10.el9_5.s390x.rpm nss-0:3.101.0-10.el9_5.src.rpm nss-debuginfo-0:3.101.0-10.el9_5.s390x.rpm nss-debugsource-0:3.101.0-10.el9_5.s390x.rpm nss-devel-0:3.101.0-10.el9_5.s390x.rpm nss-softokn-0:3.101.0-10.el9_5.s390x.rpm nss-softokn-debuginfo-0:3.101.0-10.el9_5.s390x.rpm nss-softokn-devel-0:3.101.0-10.el9_5.s390x.rpm nss-softokn-freebl-0:3.101.0-10.el9_5.s390x.rpm nss-softokn-freebl-debuginfo-0:3.101.0-10.el9_5.s390x.rpm nss-softokn-freebl-devel-0:3.101.0-10.el9_5.s390x.rpm nss-sysinit-0:3.101.0-10.el9_5.s390x.rpm nss-sysinit-debuginfo-0:3.101.0-10.el9_5.s390x.rpm nss-tools-0:3.101.0-10.el9_5.s390x.rpm nss-tools-debuginfo-0:3.101.0-10.el9_5.s390x.rpm nss-util-0:3.101.0-10.el9_5.s390x.rpm nss-util-debuginfo-0:3.101.0-10.el9_5.s390x.rpm nss-util-devel-0:3.101.0-10.el9_5.s390x.rpm