Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Fedora 23: 2016-8b28358b72 Critical: Mod_nss CIPHER Handling Issue

fedora
Calendar Grey April 25, 2016
Dist Fedora Esm H88
A security patch for mod_nss in Fedora addresses vulnerabilities linked to CVE-2016-3099, bolstering the defenses of Apache web servers.
Security fix for CVE-2016-3099

Summary

The mod_nss module provides strong cryptography for the Apache Web

server via the Secure Sockets Layer (SSL) and Transport Layer

Security (TLS) protocols using the Network Security Services (NSS)

security library.

Update Information:

Security fix for CVE-2016-3099

Topics%20covered

Topics Covered

security advisory critical Fedora security fix SSL/TLS mod_nss CIPHER issue

Change Log

References


[ 1 ] Bug #1323914 - CVE-2016-3099 mod_nss: Invalid handling of +CIPHER operator [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1323914

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mod_nss' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mod_nss
Product: Fedora 23
Version: 1.0.12
Release: 3.fc23
URL: https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement/
Summary: SSL/TLS module for the Apache HTTP server

Topics%20covered

Topics Covered

security advisory critical Fedora security fix SSL/TLS mod_nss CIPHER issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.