RHBA-2021:3793 - Bug Fix Advisory

Topic

An update for nss, nss-softokn, nss-util, and nspr is now available for Red Hat Enterprise Linux 7.

Description

Network Security Services (NSS) is a set of libraries designed to support the
cross-platform development of security-enabled client and server applications.

The nss-softokn package provides the Network Security Services Softoken Cryptographic Module.

The nss-util packages provide utilities for use with the Network Security Services (NSS) libraries.

Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.

Bug Fix(es) and Enhancement(s):

• Integrity protection is not active on all database fields (BZ#1879933)
• NSS sometimes causes CURL deadlocks (BZ#1896808)
• yum gets deadlocked/hung up (indefinitely) waiting for urlgrabber-ext-down (BZ#1909150)
• Recursive locks observed in nss-3.53.1 (BZ#1909261)
• Need to rebase to NSS 3.66 for Firefox 91 Release [RHEL 7.9] (BZ#1966816)
• NSS cannot use SQL databases created by specific versions of NSS (BZ#1978433)
• Inconsistent handling of malformed CertificateRequest messages [rhel-7.9z] (BZ#1980046)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1879933 - Integrity protection is not active on all database fields
• BZ - 1896808 - NSS sometimes causes CURL deadlocks
• BZ - 1909150 - yum gets deadlocked/hung up (indefinitely) waiting for urlgrabber-ext-down
• BZ - 1909261 - Recursive locks observed in nss-3.53.1 [rhel-7.9.z]
• BZ - 1966816 - Need to rebase to NSS 3.66 for Firefox 91 Release [RHEL 7.9]
• BZ - 1978433 - NSS cannot use SQL databases created by specific versions of NSS [rhel-7.9.z]

CVEs

(none)

References

(none)