Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Scientific Linux: Critical NSS Security Update for SL4.x, SL5.x, SL6.x

Calendar Apr 29, 2011 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory network security security update critical NSS Scientific Linux untrusted certificates
Important: nss security update 
Date: Fri, 29 Apr 2011 14:27:29 -0500
Reply-To: "Tyler L. Parsons" 
Sender: Security Errata for Scientific Linux
 
From: "Tyler L. Parsons" 
Subject: Security ERRATA Important: nss security update on SL4.x, SL5.x,
 SL6.x i386/x86_64
In-Reply-To: <038136A29FA425469182B3C95D7E5421FC65C354B4@MAPI1.fnal.gov>
MIME-Version: 1.0

Synopsis: Important: nss security update
Issue date: 2011-04-28
CVE Names:

Network Security Services (NSS) is a set of libraries designed to support
the development of security-enabled client and server applications.

This erratum blacklists a small number of HTTPS certificates by adding
them, flagged as untrusted, to the NSS Builtin Object Token (the
libnssckbi.so library) certificate store. (BZ#689430)

Note: This fix only applies to applications using the NSS Builtin Object
Token. It does not blacklist the certificates for applications that use the
NSS library, but do not use the NSS Builtin Object Token (such as curl).

All NSS users should upgrade to these updated packages, which correct this
issue. After installing the update, applications using NSS must be
restarted for the changes to take effect.

SL 4.x
 i386:
nss-3.12.8-3.el4.i386.rpm
nss-devel-3.12.8-3.el4.i386.rpm
nss-tools-3.12.8-3.el4.i386.rpm
 x86_64:
nss-3.12.8-3.el4.i386.rpm
nss-3.12.8-3.el4.x86_64.rpm
nss-devel-3.12.8-3.el4.x86_64.rpm
nss-tools-3.12.8-3.el4.x86_64.rpm

SL 5.x
 i386:
nss-3.12.8-4.el5_6.i386.rpm
nss-devel-3.12.8-4.el5_6.i386.rpm
nss-pkcs11-devel-3.12.8-4.el5_6.i386.rpm
nss-tools-3.12.8-4.el5_6.i386.rpm
 x86_64:
nss-3.12.8-4.el5_6.i386.rpm
nss-3.12.8-4.el5_6.x86_64.rpm
nss-devel-3.12.8-4.el5_6.i386.rpm
nss-devel-3.12.8-4.el5_6.x86_64.rpm
nss-pkcs11-devel-3.12.8-4.el5_6.i386.rpm
nss-pkcs11-devel-3.12.8-4.el5_6.x86_64.rpm
nss-tools-3.12.8-4.el5_6.x86_64.rpm

SL 6.x
 i386:
nss-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-devel-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-pkcs11-devel-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-sysinit-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-tools-3.12.8-3.el6_0.0.sl6.i686.rpm
 x86_64:
nss-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-3.12.8-3.el6_0.0.sl6.x86_64.rpm
nss-devel-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-devel-3.12.8-3.el6_0.0.sl6.x86_64.rpm
nss-pkcs11-devel-3.12.8-3.el6_0.0.sl6.i686.rpm
nss-pkcs11-devel-3.12.8-3.el6_0.0.sl6.x86_64.rpm
nss-sysinit-3.12.8-3.el6_0.0.sl6.x86_64.rpm
nss-tools-3.12.8-3.el6_0.0.sl6.x86_64.rpm

- Scientific Linux Development Team