RHBA-2015:1284 - Bug Fix Advisory

Topic

Updated mod_nss packages that fix several bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

The mod_nss module provides strong cryptography for the Apache HTTP Server via
the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols,
using the Network Security Services (NSS) security library.

The mod_nss packages have been upgraded to upstream version 1.0.10, which
provides a number of bug fixes and enhancements over the previous version. Most
notably, this update adds support for TLS version 1.2 to mod_nss. (BZ#1166316)

Users of mod_nss are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements. The httpd service must be restarted for
this update to take effect.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1166316 - Rebase mod_nss to support TLSv1.2

CVEs

(none)

References

(none)