RHBA-2022:6712 - Bug Fix Advisory

Topic

An update for nss, nss-softokn, nss-util, and nspr is now available for Red Hat Enterprise Linux 7.

Description

Network Security Services (NSS) is a set of libraries designed to support the
cross-platform development of security-enabled client and server applications.

The nss-softokn package provides the Network Security Services Softoken
Cryptographic Module.

The nss-util packages provide utilities for use with the Network Security
Services (NSS) libraries.

Netscape Portable Runtime (NSPR) provides platform independence for non-GUI
operating system facilities.

Bug Fix(es) and Enhancement(s):

• Import of PKCS#12 files with Camellia encryption is not supported (BZ#1462297)
• Rebase nss to 3.79 for Firefox 103 ESR (BZ#2064364)
• NSS sometimes causes hang for customer application (BZ#2066679)
• Rebase nss-util to 3.79 for Firefox 103 ESR (BZ#2093506)
• Rebase nss-softokn to 3.79 for Firefox 103 ESR (BZ#2093507)
• Rebase nspr to 3.79 for Firefox 103 ESR (BZ#2093508)
• update-ca-trust fails with /usr/bin/p11-kit extract calls getting aborted (BZ#2096268)
• certmonger startup very slow using default NSS sqlite database backend (BZ#2097811)
• selfserv binds on ipv6 only instead of both ipv6 and ipv4 (nss) (BZ#2097842)
• selfserv binds on ipv6 only instead of both ipv6 and ipv4 (nspr) (BZ#2097904)
• curl segfaults (BZ#2103706)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1462297 - Import of PKCS#12 files with Camellia encryption is not supported
• BZ - 2064364 - Rebase nss to 3.79 for Firefox 103 ESR [rhel-7.9.z]
• BZ - 2093506 - Rebase nss-util to 3.79 for Firefox 103 ESR [rhel-7.9.z]
• BZ - 2093507 - Rebase nss-softokn to 3.79 for Firefox 103 ESR [rhel-7.9.z]
• BZ - 2093508 - Rebase nspr to 3.79 for Firefox 103 ESR [rhel-7.9.z]
• BZ - 2096268 - update-ca-trust fails with /usr/bin/p11-kit extract calls getting aborted [rhel-7.9.z]
• BZ - 2097811 - certmonger startup very slow using default NSS sqlite database backend [rhel-7.9.z]
• BZ - 2097842 - selfserv binds on ipv6 only instead of both ipv6 and ipv4 (nss) [rhel-7.9.z]
• BZ - 2097904 - selfserv binds on ipv6 only instead of both ipv6 and ipv4 (nspr) [rhel-7.9.z]
• BZ - 2103706 - curl segfaults [rhel-7.9.z]

CVEs

(none)

References

(none)