RLBA-2024:6679

Synopsis

nss bug fix and enhancement update

Description

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Bug Fix(es) and Enhancement(s):

* Rebase NSS to 3.101 for Firefox (JIRA:Rocky Linux-46851)

* nss: Mozilla: Memory corruption in NSS (JIRA:Rocky Linux-47122)

* Rebase NSS to 3.101 for Firefox [rhel-9.4.z] (JIRA:Rocky Linux-46852)

* nss: Mozilla: Memory corruption in NSS [rhel-9.4.z] (JIRA:Rocky Linux-47123)

* NSS: cannot decrypt PKCS#12 with MD5 HMAC, not even with allow=ALL (JIRA:Rocky Linux-49803)

* drop DSA self-tests in FIPS from nss (JIRA:Rocky Linux-5212)

* freebl/softoken ppcle64 needs renable INIT_SUPPORT. (JIRA:Rocky Linux-6198)

* nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines [rhel-9.4.z] (JIRA:Rocky Linux-53578)

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

CVEs

Affected packages

Rocky Linux 9 aarch64 - AppStream

nss-devel-0:3.101.0-7.el9_4.aarch64.rpm nspr-0:4.35.0-14.el9_4.aarch64.rpm nspr-debuginfo-0:4.35.0-14.el9_4.aarch64.rpm nspr-devel-0:4.35.0-14.el9_4.aarch64.rpm nss-0:3.101.0-7.el9_4.aarch64.rpm nss-0:3.101.0-7.el9_4.src.rpm nss-debuginfo-0:3.101.0-7.el9_4.aarch64.rpm nss-debugsource-0:3.101.0-7.el9_4.aarch64.rpm nss-softokn-0:3.101.0-7.el9_4.aarch64.rpm nss-softokn-debuginfo-0:3.101.0-7.el9_4.aarch64.rpm nss-softokn-devel-0:3.101.0-7.el9_4.aarch64.rpm nss-softokn-freebl-0:3.101.0-7.el9_4.aarch64.rpm nss-softokn-freebl-debuginfo-0:3.101.0-7.el9_4.aarch64.rpm nss-softokn-freebl-devel-0:3.101.0-7.el9_4.aarch64.rpm nss-sysinit-0:3.101.0-7.el9_4.aarch64.rpm nss-sysinit-debuginfo-0:3.101.0-7.el9_4.aarch64.rpm nss-tools-0:3.101.0-7.el9_4.aarch64.rpm nss-tools-debuginfo-0:3.101.0-7.el9_4.aarch64.rpm nss-util-0:3.101.0-7.el9_4.aarch64.rpm nss-util-debuginfo-0:3.101.0-7.el9_4.aarch64.rpm nss-util-devel-0:3.101.0-7.el9_4.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

nspr-0:4.35.0-14.el9_4.i686.rpm nspr-0:4.35.0-14.el9_4.x86_64.rpm nspr-debuginfo-0:4.35.0-14.el9_4.x86_64.rpm nspr-devel-0:4.35.0-14.el9_4.i686.rpm nspr-devel-0:4.35.0-14.el9_4.x86_64.rpm nss-0:3.101.0-7.el9_4.i686.rpm nss-0:3.101.0-7.el9_4.src.rpm nss-0:3.101.0-7.el9_4.x86_64.rpm nss-debuginfo-0:3.101.0-7.el9_4.x86_64.rpm nss-debugsource-0:3.101.0-7.el9_4.x86_64.rpm nss-devel-0:3.101.0-7.el9_4.i686.rpm nss-devel-0:3.101.0-7.el9_4.x86_64.rpm nss-softokn-0:3.101.0-7.el9_4.i686.rpm nss-softokn-0:3.101.0-7.el9_4.x86_64.rpm nss-softokn-debuginfo-0:3.101.0-7.el9_4.x86_64.rpm nss-softokn-devel-0:3.101.0-7.el9_4.i686.rpm nss-softokn-devel-0:3.101.0-7.el9_4.x86_64.rpm nss-softokn-freebl-0:3.101.0-7.el9_4.i686.rpm nss-softokn-freebl-0:3.101.0-7.el9_4.x86_64.rpm nss-softokn-freebl-debuginfo-0:3.101.0-7.el9_4.x86_64.rpm nss-softokn-freebl-devel-0:3.101.0-7.el9_4.i686.rpm nss-softokn-freebl-devel-0:3.101.0-7.el9_4.x86_64.rpm nss-sysinit-0:3.101.0-7.el9_4.x86_64.rpm nss-sysinit-debuginfo-0:3.101.0-7.el9_4.x86_64.rpm nss-tools-0:3.101.0-7.el9_4.x86_64.rpm nss-tools-debuginfo-0:3.101.0-7.el9_4.x86_64.rpm nss-util-0:3.101.0-7.el9_4.i686.rpm nss-util-0:3.101.0-7.el9_4.x86_64.rpm nss-util-debuginfo-0:3.101.0-7.el9_4.x86_64.rpm nss-util-devel-0:3.101.0-7.el9_4.i686.rpm nss-util-devel-0:3.101.0-7.el9_4.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

nspr-0:4.35.0-14.el9_4.ppc64le.rpm nspr-debuginfo-0:4.35.0-14.el9_4.ppc64le.rpm nspr-devel-0:4.35.0-14.el9_4.ppc64le.rpm nss-0:3.101.0-7.el9_4.ppc64le.rpm nss-0:3.101.0-7.el9_4.src.rpm nss-debuginfo-0:3.101.0-7.el9_4.ppc64le.rpm nss-debugsource-0:3.101.0-7.el9_4.ppc64le.rpm nss-devel-0:3.101.0-7.el9_4.ppc64le.rpm nss-softokn-0:3.101.0-7.el9_4.ppc64le.rpm nss-softokn-debuginfo-0:3.101.0-7.el9_4.ppc64le.rpm nss-softokn-devel-0:3.101.0-7.el9_4.ppc64le.rpm nss-softokn-freebl-0:3.101.0-7.el9_4.ppc64le.rpm nss-softokn-freebl-debuginfo-0:3.101.0-7.el9_4.ppc64le.rpm nss-softokn-freebl-devel-0:3.101.0-7.el9_4.ppc64le.rpm nss-sysinit-0:3.101.0-7.el9_4.ppc64le.rpm nss-sysinit-debuginfo-0:3.101.0-7.el9_4.ppc64le.rpm nss-tools-0:3.101.0-7.el9_4.ppc64le.rpm nss-tools-debuginfo-0:3.101.0-7.el9_4.ppc64le.rpm nss-util-0:3.101.0-7.el9_4.ppc64le.rpm nss-util-debuginfo-0:3.101.0-7.el9_4.ppc64le.rpm nss-util-devel-0:3.101.0-7.el9_4.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

nspr-0:4.35.0-14.el9_4.s390x.rpm nspr-debuginfo-0:4.35.0-14.el9_4.s390x.rpm nspr-devel-0:4.35.0-14.el9_4.s390x.rpm nss-0:3.101.0-7.el9_4.s390x.rpm nss-0:3.101.0-7.el9_4.src.rpm nss-debuginfo-0:3.101.0-7.el9_4.s390x.rpm nss-debugsource-0:3.101.0-7.el9_4.s390x.rpm nss-devel-0:3.101.0-7.el9_4.s390x.rpm nss-softokn-0:3.101.0-7.el9_4.s390x.rpm nss-softokn-debuginfo-0:3.101.0-7.el9_4.s390x.rpm nss-softokn-devel-0:3.101.0-7.el9_4.s390x.rpm nss-softokn-freebl-0:3.101.0-7.el9_4.s390x.rpm nss-softokn-freebl-debuginfo-0:3.101.0-7.el9_4.s390x.rpm nss-softokn-freebl-devel-0:3.101.0-7.el9_4.s390x.rpm nss-sysinit-0:3.101.0-7.el9_4.s390x.rpm nss-sysinit-debuginfo-0:3.101.0-7.el9_4.s390x.rpm nss-tools-0:3.101.0-7.el9_4.s390x.rpm nss-tools-debuginfo-0:3.101.0-7.el9_4.s390x.rpm nss-util-0:3.101.0-7.el9_4.s390x.rpm nss-util-debuginfo-0:3.101.0-7.el9_4.s390x.rpm nss-util-devel-0:3.101.0-7.el9_4.s390x.rpm