RHBA-2015:0926 - Bug Fix Advisory

Topic

Updated nss, nss-util, and nspr packages that fix several bugs and add various
enhancements are now available for Red Hat Enterprise Linux 6.

Description

Network Security Services (NSS) is a set of libraries designed to support
cross-platform development of security-enabled client and server applications.
Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities.

The nss and nss-util packages have been upgraded to upstream versions 3.18, and
the nspr packages have been upgraded to upstream version 4.10.8. The upgraded
versions provide a number of bug fixes and enhancements over the previous
versions. Notably, these upgrades allow users to upgrade to Mozilla Firefox 38
Extended Support Release. (BZ#1205064, BZ#1205065, BZ#1207052)

This update also fixes the following bugs:

• Previously, a race condition in NSS in some cases caused heavily threaded

applications, such as the ns-slapd daemon, to terminate unexpectedly when under
load. This update fixes the underlying cause, and the described crash no longer
occurs. (BZ#1182902)

• When using version 3.16.1-4 of the nss packages, NSS returned different cipher

suites than the prior versions of NSS. This caused certain applications that add
external constraints to the cipher suites, such as the Lightweight Directory
Access Protocol server (LDAPS), to fail. With this update, the cipher suites
table in the /nss/lib/ssl/ssl3con.c file has been adjusted to be compatible with
the previous version of NSS, and the affected applications now work as expected.
(BZ#1202488)

Users of nss, nss-util, and nspr are advised to upgrade to these updated
packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.6 i386
• Red Hat Enterprise Linux Server - AUS 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - TUS 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.6 i386
• Red Hat Enterprise Linux EUS Compute Node 6.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1205064 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR
• BZ - 1205065 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]
• BZ - 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]

CVEs

(none)

References

(none)