Scientific Linux 5: SLSA-2014:0916-1 Critical nss And nspr Security Update

Date: Tue, 22 Jul 2014 23:37:04 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Critical: nss and nspr on SL5.x i386/x86_64
MIME-Version: 1.0

Synopsis: Critical: nss and nspr security update
Advisory ID: SLSA-2014:0916-1
Issue Date: 2014-07-22
CVE Numbers: CVE-2014-1544
--

A race condition was found in the way NSS verified certain certificates. A
remote attacker could use this flaw to crash an application using NSS or,
possibly, execute arbitrary code with the privileges of the user running
that application. (CVE-2014-1544)

After installing this update, applications using NSS or NSPR must be
restarted for this update to take effect.
--

SL5
 x86_64
 nspr-4.10.6-1.el5_10.i386.rpm
 nspr-4.10.6-1.el5_10.x86_64.rpm
 nspr-debuginfo-4.10.6-1.el5_10.i386.rpm
 nspr-debuginfo-4.10.6-1.el5_10.x86_64.rpm
 nss-3.15.3-7.el5_10.i386.rpm
 nss-3.15.3-7.el5_10.x86_64.rpm
 nss-debuginfo-3.15.3-7.el5_10.i386.rpm
 nss-debuginfo-3.15.3-7.el5_10.x86_64.rpm
 nss-tools-3.15.3-7.el5_10.x86_64.rpm
 nspr-devel-4.10.6-1.el5_10.i386.rpm
 nspr-devel-4.10.6-1.el5_10.x86_64.rpm
 nss-devel-3.15.3-7.el5_10.i386.rpm
 nss-devel-3.15.3-7.el5_10.x86_64.rpm
 nss-pkcs11-devel-3.15.3-7.el5_10.i386.rpm
 nss-pkcs11-devel-3.15.3-7.el5_10.x86_64.rpm
 i386
 nspr-4.10.6-1.el5_10.i386.rpm
 nspr-debuginfo-4.10.6-1.el5_10.i386.rpm
 nss-3.15.3-7.el5_10.i386.rpm
 nss-debuginfo-3.15.3-7.el5_10.i386.rpm
 nss-tools-3.15.3-7.el5_10.i386.rpm
 nspr-devel-4.10.6-1.el5_10.i386.rpm
 nss-devel-3.15.3-7.el5_10.i386.rpm
 nss-pkcs11-devel-3.15.3-7.el5_10.i386.rpm

- Scientific Linux Development Team