Red Hat Product Errata RHSA-2012:0532 - Security Advisory
Issued:
2012-04-30
Updated:
2012-04-30

RHSA-2012:0532 - Security Advisory

Synopsis

Important: nss security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated nss packages that fix one security issue are now available for Red
Hat Enterprise Linux 5.6 Extended Update Support

The Red Hat Security Response Team has rated this update as having
important security impact.

Description

Network Security Services (NSS) is a set of libraries designed to support
the cross-platform development of security-enabled client and server
applications.

It was found that a Certificate Authority (CA) issued fraudulent HTTPS
certificates. This update renders any HTTPS certificates signed by that CA
as untrusted. This covers all uses of the certificates, including SSL,
S/MIME, and code signing. (BZ#734316)

Note: This fix only applies to applications using the NSS Builtin Object
Token. It does not render the certificates untrusted for applications that
use the NSS library, but do not use the NSS Builtin Object Token.

All NSS users should upgrade to these updated packages, which correct this
issue. After installing the update, applications using NSS must be
restarted for the changes to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 i386
  • Red Hat Enterprise Linux Server - AUS 5.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.6 ia64
  • Red Hat Enterprise Linux Server - AUS 5.6 i386
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.6 s390x
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.6 ppc
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6 i386

Fixes

  • BZ - 734316 - Fraudulent certificates signed by DigiNotar CA certificate (MFSA 2011-34)

CVEs

(none)

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6

SRPM
nss-3.12.8-6.el5_6.src.rpm SHA-256: bcce9db82d903edbc6e10655f1e274b57628d3a401b29297968bf2e0088e0fd8
x86_64
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-3.12.8-6.el5_6.x86_64.rpm SHA-256: 7d66ba76928fd83564f4be9faed46e360e4c4e913aeeba2f117229bbcce5abe2
nss-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 3f42b288f3ed6d404a8a0976c7c5ad1a57f66f7b00ae9309e392843c3155b778
nss-devel-3.12.8-6.el5_6.x86_64.rpm SHA-256: 365a9a0426d3d39bf888757d5ccf751ecc43cce93c3cd1464920f05cca9b0eb3
nss-pkcs11-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 551401aa1356a19f37566aeaa45fb1667025781d67e5690efd780f022f8a7dfd
nss-pkcs11-devel-3.12.8-6.el5_6.x86_64.rpm SHA-256: 6e34f9060312073ce3bd9124dabea8841fe63921b77cb1593f6587922c29322d
nss-tools-3.12.8-6.el5_6.x86_64.rpm SHA-256: 24f263d26ae92b9790847ec6ce4f8602dac717f7b8653ec2052e6156a166631b
ia64
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-3.12.8-6.el5_6.ia64.rpm SHA-256: 6043e02bd973af67698b9d4d9bd1cd3bdbec884f4eb6da6aac3884950f91f23d
nss-devel-3.12.8-6.el5_6.ia64.rpm SHA-256: b44d25d847d9c7d59f194fd1b1c055d4bd45eb80ba6078a0daa9b1af26f4b279
nss-pkcs11-devel-3.12.8-6.el5_6.ia64.rpm SHA-256: 55824bd47a1fad6fba2af155240d61ef0238eb031b620954574187a2d0d3d792
nss-tools-3.12.8-6.el5_6.ia64.rpm SHA-256: 73b7af1511b4e88a33370ec1bd3ff002a13f6faeafaf086860f6587bb176275f
i386
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 3f42b288f3ed6d404a8a0976c7c5ad1a57f66f7b00ae9309e392843c3155b778
nss-pkcs11-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 551401aa1356a19f37566aeaa45fb1667025781d67e5690efd780f022f8a7dfd
nss-tools-3.12.8-6.el5_6.i386.rpm SHA-256: 85b91f7e231a05cc91e157acb7061c0171acb201629735399fb6b3d6b9471957

Red Hat Enterprise Linux Server - AUS 5.6

SRPM
nss-3.12.8-6.el5_6.src.rpm SHA-256: bcce9db82d903edbc6e10655f1e274b57628d3a401b29297968bf2e0088e0fd8
x86_64
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-3.12.8-6.el5_6.x86_64.rpm SHA-256: 7d66ba76928fd83564f4be9faed46e360e4c4e913aeeba2f117229bbcce5abe2
nss-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 3f42b288f3ed6d404a8a0976c7c5ad1a57f66f7b00ae9309e392843c3155b778
nss-devel-3.12.8-6.el5_6.x86_64.rpm SHA-256: 365a9a0426d3d39bf888757d5ccf751ecc43cce93c3cd1464920f05cca9b0eb3
nss-pkcs11-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 551401aa1356a19f37566aeaa45fb1667025781d67e5690efd780f022f8a7dfd
nss-pkcs11-devel-3.12.8-6.el5_6.x86_64.rpm SHA-256: 6e34f9060312073ce3bd9124dabea8841fe63921b77cb1593f6587922c29322d
nss-tools-3.12.8-6.el5_6.x86_64.rpm SHA-256: 24f263d26ae92b9790847ec6ce4f8602dac717f7b8653ec2052e6156a166631b
ia64
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-3.12.8-6.el5_6.ia64.rpm SHA-256: 6043e02bd973af67698b9d4d9bd1cd3bdbec884f4eb6da6aac3884950f91f23d
nss-devel-3.12.8-6.el5_6.ia64.rpm SHA-256: b44d25d847d9c7d59f194fd1b1c055d4bd45eb80ba6078a0daa9b1af26f4b279
nss-pkcs11-devel-3.12.8-6.el5_6.ia64.rpm SHA-256: 55824bd47a1fad6fba2af155240d61ef0238eb031b620954574187a2d0d3d792
nss-tools-3.12.8-6.el5_6.ia64.rpm SHA-256: 73b7af1511b4e88a33370ec1bd3ff002a13f6faeafaf086860f6587bb176275f
i386
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 3f42b288f3ed6d404a8a0976c7c5ad1a57f66f7b00ae9309e392843c3155b778
nss-pkcs11-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 551401aa1356a19f37566aeaa45fb1667025781d67e5690efd780f022f8a7dfd
nss-tools-3.12.8-6.el5_6.i386.rpm SHA-256: 85b91f7e231a05cc91e157acb7061c0171acb201629735399fb6b3d6b9471957

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.6

SRPM
nss-3.12.8-6.el5_6.src.rpm SHA-256: bcce9db82d903edbc6e10655f1e274b57628d3a401b29297968bf2e0088e0fd8
s390x
nss-3.12.8-6.el5_6.s390.rpm SHA-256: 6153499522db7ee40a9063825797a5065e7596055f8f4fd84a49ff36925ccbda
nss-3.12.8-6.el5_6.s390x.rpm SHA-256: 8a641b81e1abcb0c5e1c3989969add547a1402e42bb4b6ddbdb89119822f8651
nss-devel-3.12.8-6.el5_6.s390.rpm SHA-256: 782be6553c3d7ff6f063c5417a52a08287649015bd7df7b6d465fd35d35f18f8
nss-devel-3.12.8-6.el5_6.s390x.rpm SHA-256: cea3cc82c380ab752f693e1bd5ed1e02cd66372a769784ec6041d69a370d3667
nss-pkcs11-devel-3.12.8-6.el5_6.s390.rpm SHA-256: 8971f08edc2a737dc8f097cd8239a0ea0495bfcd3780c5720cd52eea992a2ba0
nss-pkcs11-devel-3.12.8-6.el5_6.s390x.rpm SHA-256: 1cbd414a0b3e0af35ad696807e488788c662f3ed02585fee856deccd8843ce70
nss-tools-3.12.8-6.el5_6.s390x.rpm SHA-256: df15ad3a9f801fe991d22b13d9da8a540e6d794a44c454ef2e7d8f865732b3fa

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.6

SRPM
nss-3.12.8-6.el5_6.src.rpm SHA-256: bcce9db82d903edbc6e10655f1e274b57628d3a401b29297968bf2e0088e0fd8
ppc
nss-3.12.8-6.el5_6.ppc.rpm SHA-256: a0d939029a5ef03a3a0c07bc3cca0f2ac90edb611a757d0174443a5fc12fd3a7
nss-3.12.8-6.el5_6.ppc64.rpm SHA-256: ed3bfb9e3623649ad45f1dd71ff087efe84b2036448ab94231e0820f161cc694
nss-devel-3.12.8-6.el5_6.ppc.rpm SHA-256: c849f07735925a6d160ced6ef9e8c28afdb9efc8685d7ed2916331a954562369
nss-devel-3.12.8-6.el5_6.ppc64.rpm SHA-256: fc244cc7f0d3c16fbfa1fb49b694da1525ee8403a221f0373430679b8e7ef553
nss-pkcs11-devel-3.12.8-6.el5_6.ppc.rpm SHA-256: 2388503153050517f7f1f451875bbdd260c9c217eb52fd0c881f57c9c15bc65b
nss-pkcs11-devel-3.12.8-6.el5_6.ppc64.rpm SHA-256: 14038dd275b7498297d08ddd6ecbe92533d5765411b088d2fbf78a71a43970dd
nss-tools-3.12.8-6.el5_6.ppc.rpm SHA-256: aa79c9b985ebb6df01f7ed42f831e2cf7835ef767ddb531a3d1bf2518113bf7f

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6

SRPM
nss-3.12.8-6.el5_6.src.rpm SHA-256: bcce9db82d903edbc6e10655f1e274b57628d3a401b29297968bf2e0088e0fd8
x86_64
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-3.12.8-6.el5_6.x86_64.rpm SHA-256: 7d66ba76928fd83564f4be9faed46e360e4c4e913aeeba2f117229bbcce5abe2
nss-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 3f42b288f3ed6d404a8a0976c7c5ad1a57f66f7b00ae9309e392843c3155b778
nss-devel-3.12.8-6.el5_6.x86_64.rpm SHA-256: 365a9a0426d3d39bf888757d5ccf751ecc43cce93c3cd1464920f05cca9b0eb3
nss-pkcs11-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 551401aa1356a19f37566aeaa45fb1667025781d67e5690efd780f022f8a7dfd
nss-pkcs11-devel-3.12.8-6.el5_6.x86_64.rpm SHA-256: 6e34f9060312073ce3bd9124dabea8841fe63921b77cb1593f6587922c29322d
nss-tools-3.12.8-6.el5_6.x86_64.rpm SHA-256: 24f263d26ae92b9790847ec6ce4f8602dac717f7b8653ec2052e6156a166631b
i386
nss-3.12.8-6.el5_6.i386.rpm SHA-256: 187178d676ede2561192fa4052489744e40d2b91dbc1762bea3daab0fca424c3
nss-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 3f42b288f3ed6d404a8a0976c7c5ad1a57f66f7b00ae9309e392843c3155b778
nss-pkcs11-devel-3.12.8-6.el5_6.i386.rpm SHA-256: 551401aa1356a19f37566aeaa45fb1667025781d67e5690efd780f022f8a7dfd
nss-tools-3.12.8-6.el5_6.i386.rpm SHA-256: 85b91f7e231a05cc91e157acb7061c0171acb201629735399fb6b3d6b9471957

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.