Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 21: 2015-9130 Critical Severity: NSS Logjam Patch

fedora
Calendar Grey June 1, 2015
Dist Fedora Esm H88
Fedora 21's security bulletin addresses the logjam vulnerability through an NSS version 3.19.1 update, detailing necessary fixes and severity levels for user protection.
Security fix for CVE-2015-4000 Update to the upstream NSS 3.19.1 release, which includes a fix for the recently published logjam attack

Summary

Network Security Services (NSS) is a set of libraries designed to

support cross-platform development of security-enabled client and

server applications. Applications built with NSS can support SSL v2

and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509

v3 certificates, and other security standards.

Update Information:

Security fix for CVE-2015-4000

Update to the upstream NSS 3.19.1 release, which includes a fix for the recently published logjam attack.

The previous 3.19 release made several notable changes related to the TLS protocol, one of them was to disable the SSL 3 protocol by default.

For the full list of changes in the 3.19 and 3.19.1 releases, please refer to the upstream release notes documents:



Topics%20covered

Topics Covered

security advisory network security Fedora software patch critical severity NSS update logjam attack

Change Log

* Thu May 28 2015 Kai Engert - 3.19.1-1.0 - Update to NSS 3.19.1 * Tue May 19 2015 Kai Engert - 3.19.0-1.0 - Update to NSS 3.19 * Mon Mar 23 2015 Elio Maldonado - 3.18.0-1 - Update to nss-3.18.0 * Wed Jan 28 2015 Elio Maldonado - 3.17.4-1 - Update to nss-3.17.4 * Sat Jan 24 2015 Ville Skyttä - 3.17.3-4 - Own the %{_datadir}/doc/nss-tools dir * Mon Dec 15 2014 Elio Maldonado - 3.17.3-2 - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer - Install pp man page in %{_datadir}/doc/nss-tools/pp.1 - Use %{_mandir} instead of /usr/share/man as more generic * Fri Dec 5 2014 Elio Maldonado - 3.17.3-1 - Update to nss-3.17.3 - Resolves: Bug 1171012 - nss-3.17.3 is available * Thu Oct 16 2014 Elio Maldonado - 3.17.2-2 - Resolves: Bug 994599 - Enable TLS 1.2 by default

References


[ 1 ] Bug #1223211 - CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks https://bugzilla.redhat.com/show_bug.cgi?id=1223211

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update nss' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: nss
Product: Fedora 21
Version: 3.19.1
Release: 1.0.fc21
URL: https://firefox-source-docs.mozilla.org/security/nss/index.html
Summary: Network Security Services

Topics%20covered

Topics Covered

security advisory network security Fedora software patch critical severity NSS update logjam attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here