Oracle Linux 6166 Published by

A nss, nss-softokn, nss-util and nspr bug fix and enhancement update has been released for Oracle Linux 6



Oracle Linux Enhancement Advisory ELEA-2019-3280

http://linux.oracle.com/errata/ELEA-2019-3280.html

The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network:

i386:
nspr-4.21.0-1.el6_10.i686.rpm
nspr-devel-4.21.0-1.el6_10.i686.rpm
nss-3.44.0-7.0.1.el6_10.i686.rpm
nss-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-pkcs11-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-softokn-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-sysinit-3.44.0-7.0.1.el6_10.i686.rpm
nss-tools-3.44.0-7.0.1.el6_10.i686.rpm
nss-util-3.44.0-1.el6_10.i686.rpm
nss-util-devel-3.44.0-1.el6_10.i686.rpm

x86_64:
nspr-4.21.0-1.el6_10.i686.rpm
nspr-4.21.0-1.el6_10.x86_64.rpm
nspr-devel-4.21.0-1.el6_10.i686.rpm
nspr-devel-4.21.0-1.el6_10.x86_64.rpm
nss-3.44.0-7.0.1.el6_10.i686.rpm
nss-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-devel-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-pkcs11-devel-3.44.0-7.0.1.el6_10.i686.rpm
nss-pkcs11-devel-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-softokn-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-softokn-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-devel-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-softokn-freebl-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-softokn-freebl-devel-3.44.0-5.0.1.el6_10.i686.rpm
nss-softokn-freebl-devel-3.44.0-5.0.1.el6_10.x86_64.rpm
nss-sysinit-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-tools-3.44.0-7.0.1.el6_10.x86_64.rpm
nss-util-3.44.0-1.el6_10.i686.rpm
nss-util-3.44.0-1.el6_10.x86_64.rpm
nss-util-devel-3.44.0-1.el6_10.i686.rpm
nss-util-devel-3.44.0-1.el6_10.x86_64.rpm

SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/nspr-4.21.0-1.el6_10.src.rpm http://oss.oracle.com/ol6/SRPMS-updates/nss-3.44.0-7.0.1.el6_10.src.rpm http://oss.oracle.com/ol6/SRPMS-updates/nss-softokn-3.44.0-5.0.1.el6_10.src.rpm
http://oss.oracle.com/ol6/SRPMS-updates/nss-util-3.44.0-1.el6_10.src.rpm

Description of changes:

nspr
[4.21.0-1]
- Rebase to NSPR 4.21

nss
[3.44.0-7.0.1]
- Added nss-vendor.patch to change vendor
- Temporarily disable some tests until expired PayPalEE.cert is renewed
[3.44.0-7]
- Add back missing Mozilla Policy

[3.44.0-6]
- Fix gtest failure detection

[3.44.0-5]
- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default
[3.44.0-4]
- Fix cipher order
- fix broken gtests

[3.44.0-3]
- fix problems found by qe:
- AC13: SSL3 "disabled"
- AC26: Chacha20 and TLS 1.3 ciphers should be prioritized
- SHA-384 PRF => *_256_GCM_SHA384 ciphers should be reenabled for consistency
- AC28: nss-policy-check is missing from packages and $PATH - extra: apostrophes in certutil manpage got mangled

[3.44.0-2]
- restore Conflicts: with curl

[3.44.0-1]
- Rebase to 3.44.0 with critical fixes

nss-softokn
[3.44.0-5.0.1]
- Add fips140-2 DSA Known Answer Test fix [Orabug 26696773] - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
[Orabug 26617833], [Orabug 26617780]

[3.44.0-5]
- include sqlite3_open_v2 in the patch

[3.44.0-4]
- actually turn on the old sqlite patch

[3.44.0-3]
- add back old sqlite patch

[3.44.0-2]
- add back add-relro patch

[3.44.0-1]
- Rebase for Firefox
- Resolves Bug 1743628

nss-util
[3.44.0-1]
- Rebase to NSS 3.44.0 for Firefox 68