RHBA-2015:0925 - Bug Fix Advisory

Topic

Updated nss and nspr packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 5.

Description

Network Security Services (NSS) is a set of libraries designed to support
cross-platform development of security-enabled client and server applications.
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities.

The nss packages have been upgraded to upstream version 3.18.0, and the nspr
packages have been upgraded to upstream version 4.10.8. The upgraded versions
provide a number of bug fixes and enhancements over the previous versions.
Notably, these upgrades allow users to upgrade to Mozilla Firefox 38 Extended
Support Release. (BZ#1200905, BZ#1200921)

Users of nss, nss-softokn, nss-util, and nspr are advised to upgrade to these
updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]
• BZ - 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]

CVEs

• CVE-2014-1569

References

(none)