RHBA-2011:0692 - Bug Fix Advisory

Topic

Updated nspr and nss related packages that fix several bugs and add various
enhancements are now available for Red Hat Enterprise Linux 6.

Description

Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities. These facilities include threads, thread
synchronization, normal file and network I/O, interval timing, calendar
time, basic memory management (malloc and free), and shared library
linking.

Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications. Applications built with NSS can support SSLv2, SSLv3, TLS,
and other security standards.

These updated nspr and nss related packages include numerous bug fixes and
enhancements. Space precludes documenting all of these changes in this
advisory. Users are directed to the Red Hat Enterprise Linux 6.1 Technical
Notes for information on the most significant of these changes:

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html

All nspr and nss users are advised to upgrade to these updated packages,
which resolve these issues and provide these enhancements.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 589636 - rpmbuild cycles during test part when ipv6 is enabled
• BZ - 602629 - certutil -H doesn't know -W option
• BZ - 630101 - Cannot import private key
• BZ - 630103 - https://www.flores-associates.com results in untrusted connection
• BZ - 631000 - rhel6 openssl creates PKCS#8 encoded PEM RSA private key files, nss can't read them
• BZ - 631586 - renegotiate transitional patch creates an unclosed comment
• BZ - 637948 - enable the aes-ni implementation in nss
• BZ - 643134 - nss trusts CAs it shouldn't
• BZ - 643553 - nss-sysinit: setup-nsssysinit.sh should create pkcs11.txt with correct permissions regardless of current umask
• BZ - 643554 - nss-sysinit: sysinit disabled on package upgrade
• BZ - 643556 - [RFE] nss-sysinit: setup-nsssysinit.sh should be able to report current status
• BZ - 643564 - libpnsspem aborts if cacert dir contains other directoires
• BZ - 647834 - Consider addition of %verify(not md5 size mtime) to configuration files
• BZ - 656697 - nss build fails with test of PayPalEE because PayPalEE certificate expired on Oct 31, 2010
• BZ - 676387 - Missing include in nss-softokn-freebl-devel subpackage of nss-softokn
• BZ - 689031 - nss needs to be able to use pem files interchangeably in a single process

CVEs

(none)

References

• https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html