Synopsis

Moderate: nss security update

Type/Severity

Security Advisory: Moderate

Topic

An update for nss is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

• nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello (CVE-2018-12384)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

• BZ - 1622089 - CVE-2018-12384 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

CVEs

• CVE-2018-12384

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 6

SRPM
nss-3.36.0-9.el6_10.src.rpm	SHA-256: e4ae1f49837cfa92d2f55be8b7d04dae97964c688f721fed9b153faeeadd46bc
x86_64
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 3f25a9e6a4bc1ad0293964e79e8ec1cd05ee47afdb096bc2f91b33eb492566b0
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bc0f038c2893a14987bb145e0b25f9bbe81fb552e0120e0f0ccd7b4bdaf18003
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-pkcs11-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bec90925c060a4e7672d81fb4cbafa7bea50896100c81752cb754b3bf870e978
nss-sysinit-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 4397d76be33826df27d8f3bd19dfa71110dd5428afb105675fb79a581d7949ca
nss-tools-3.36.0-9.el6_10.x86_64.rpm	SHA-256: d54c3ca5f16a5a56a0bbb9f197fc6cc53b2e85c232e5d7763224e560c71e84d2
i386
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-sysinit-3.36.0-9.el6_10.i686.rpm	SHA-256: 634f3aa85871235e5abc7b44543bb0a3a8b39b25de1aa9aff4bc09d3f0b1a778
nss-tools-3.36.0-9.el6_10.i686.rpm	SHA-256: 7ee13b6be725fc82eb9bb6d500b4a5c2aa03a6f986654cf04d5835a0cc51f7f4

Red Hat Enterprise Linux Workstation 6

SRPM
nss-3.36.0-9.el6_10.src.rpm	SHA-256: e4ae1f49837cfa92d2f55be8b7d04dae97964c688f721fed9b153faeeadd46bc
x86_64
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 3f25a9e6a4bc1ad0293964e79e8ec1cd05ee47afdb096bc2f91b33eb492566b0
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bc0f038c2893a14987bb145e0b25f9bbe81fb552e0120e0f0ccd7b4bdaf18003
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-pkcs11-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bec90925c060a4e7672d81fb4cbafa7bea50896100c81752cb754b3bf870e978
nss-sysinit-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 4397d76be33826df27d8f3bd19dfa71110dd5428afb105675fb79a581d7949ca
nss-tools-3.36.0-9.el6_10.x86_64.rpm	SHA-256: d54c3ca5f16a5a56a0bbb9f197fc6cc53b2e85c232e5d7763224e560c71e84d2
i386
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-sysinit-3.36.0-9.el6_10.i686.rpm	SHA-256: 634f3aa85871235e5abc7b44543bb0a3a8b39b25de1aa9aff4bc09d3f0b1a778
nss-tools-3.36.0-9.el6_10.i686.rpm	SHA-256: 7ee13b6be725fc82eb9bb6d500b4a5c2aa03a6f986654cf04d5835a0cc51f7f4

Red Hat Enterprise Linux Desktop 6

SRPM
nss-3.36.0-9.el6_10.src.rpm	SHA-256: e4ae1f49837cfa92d2f55be8b7d04dae97964c688f721fed9b153faeeadd46bc
x86_64
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 3f25a9e6a4bc1ad0293964e79e8ec1cd05ee47afdb096bc2f91b33eb492566b0
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bc0f038c2893a14987bb145e0b25f9bbe81fb552e0120e0f0ccd7b4bdaf18003
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-pkcs11-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bec90925c060a4e7672d81fb4cbafa7bea50896100c81752cb754b3bf870e978
nss-sysinit-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 4397d76be33826df27d8f3bd19dfa71110dd5428afb105675fb79a581d7949ca
nss-tools-3.36.0-9.el6_10.x86_64.rpm	SHA-256: d54c3ca5f16a5a56a0bbb9f197fc6cc53b2e85c232e5d7763224e560c71e84d2
i386
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-sysinit-3.36.0-9.el6_10.i686.rpm	SHA-256: 634f3aa85871235e5abc7b44543bb0a3a8b39b25de1aa9aff4bc09d3f0b1a778
nss-tools-3.36.0-9.el6_10.i686.rpm	SHA-256: 7ee13b6be725fc82eb9bb6d500b4a5c2aa03a6f986654cf04d5835a0cc51f7f4

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
nss-3.36.0-9.el6_10.src.rpm	SHA-256: e4ae1f49837cfa92d2f55be8b7d04dae97964c688f721fed9b153faeeadd46bc
s390x
nss-3.36.0-9.el6_10.s390.rpm	SHA-256: 094b96f7ba880699fc8df931b72d2891323dbf11e76d6e3c6802555ced3dbe63
nss-3.36.0-9.el6_10.s390x.rpm	SHA-256: b943c3442fced64105e89f73a525e2da10c06c69a8978a41a8f6b6e7b8c86ee3
nss-debuginfo-3.36.0-9.el6_10.s390.rpm	SHA-256: 2f8cde2f4769da0140a806b6c0bfb69d9e02461d0d4f9f911b3ea082e81b1569
nss-debuginfo-3.36.0-9.el6_10.s390.rpm	SHA-256: 2f8cde2f4769da0140a806b6c0bfb69d9e02461d0d4f9f911b3ea082e81b1569
nss-debuginfo-3.36.0-9.el6_10.s390x.rpm	SHA-256: 650c6cdcfa7d980b26cdaa2ee675df6b99f25a6f4a6cac740f8965b285c0222c
nss-debuginfo-3.36.0-9.el6_10.s390x.rpm	SHA-256: 650c6cdcfa7d980b26cdaa2ee675df6b99f25a6f4a6cac740f8965b285c0222c
nss-devel-3.36.0-9.el6_10.s390.rpm	SHA-256: 2340aa4e4aa9703bd925ef8709b771cf79bd3caed4e2702352865cf5bc75b235
nss-devel-3.36.0-9.el6_10.s390x.rpm	SHA-256: e6c308b922058b32d15240867b74842b5cb5a9e2d71256b23aefaa5dd8929cbd
nss-pkcs11-devel-3.36.0-9.el6_10.s390.rpm	SHA-256: e27c00fe197193145f807c4e30e51f193cd5274550bda3845ba626ef1704e478
nss-pkcs11-devel-3.36.0-9.el6_10.s390x.rpm	SHA-256: ad1322c8396a7c843c6987828e70d89898b89eeba83132f98fc552cf0ba9444b
nss-sysinit-3.36.0-9.el6_10.s390x.rpm	SHA-256: 6acacfead14df3f5874bd43a96764bdd867f3e78c64ea5a0b5199e195fb409f8
nss-tools-3.36.0-9.el6_10.s390x.rpm	SHA-256: 97d10ae174733fb189769257ef7a1e83f83b8e027b56145afb66393b9426c5a4

Red Hat Enterprise Linux for Power, big endian 6

SRPM
nss-3.36.0-9.el6_10.src.rpm	SHA-256: e4ae1f49837cfa92d2f55be8b7d04dae97964c688f721fed9b153faeeadd46bc
ppc64
nss-3.36.0-9.el6_10.ppc.rpm	SHA-256: bb72d424aafe003d28bba8c35211669cf0e32bf2891186d6398716df20044677
nss-3.36.0-9.el6_10.ppc64.rpm	SHA-256: 795c7da2a09562abb8cc5797e77d5cc27e561664a9b9980a13ccaefa883f8e4b
nss-debuginfo-3.36.0-9.el6_10.ppc.rpm	SHA-256: b045d2dbe897a6b390c287f07fedd77355c298e80fc66c6e632495df370f2773
nss-debuginfo-3.36.0-9.el6_10.ppc.rpm	SHA-256: b045d2dbe897a6b390c287f07fedd77355c298e80fc66c6e632495df370f2773
nss-debuginfo-3.36.0-9.el6_10.ppc64.rpm	SHA-256: 19209c0be99478bd06b7df0f4d710ba4adc3f7a1360b3b60d6d157578d301896
nss-debuginfo-3.36.0-9.el6_10.ppc64.rpm	SHA-256: 19209c0be99478bd06b7df0f4d710ba4adc3f7a1360b3b60d6d157578d301896
nss-devel-3.36.0-9.el6_10.ppc.rpm	SHA-256: 4e8a1371e5e7f6989d7ff4541990e72fa401b2b375349794dd09e12be1dbb97e
nss-devel-3.36.0-9.el6_10.ppc64.rpm	SHA-256: 2d7a206914bf1139aebf096405578c7b843b667e43d0fdad8903092fe067c0ff
nss-pkcs11-devel-3.36.0-9.el6_10.ppc.rpm	SHA-256: 8af7c839a7e38a993d05b9d0c772cfc3fa8af7d9726e22678f21ada55cfdabee
nss-pkcs11-devel-3.36.0-9.el6_10.ppc64.rpm	SHA-256: 7a1daf298cd756b047cb5db5e0d05679b48c09017d8423016469082358ef58eb
nss-sysinit-3.36.0-9.el6_10.ppc64.rpm	SHA-256: 93cbb22d16a78aad666d926f8af600e0fd7d9cda15a36c98e601f6aeb8274d4d
nss-tools-3.36.0-9.el6_10.ppc64.rpm	SHA-256: b9faf79cc4480af559faf51a81ba38f7150154876ef73c674e5589ea0f45f521

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
nss-3.36.0-9.el6_10.src.rpm	SHA-256: e4ae1f49837cfa92d2f55be8b7d04dae97964c688f721fed9b153faeeadd46bc
x86_64
nss-3.36.0-9.el6_10.i686.rpm	SHA-256: 1697e42c61599ba9a0ec68b90b052f5245335ce2e6042b430ac63fc9205f06db
nss-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 3f25a9e6a4bc1ad0293964e79e8ec1cd05ee47afdb096bc2f91b33eb492566b0
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.i686.rpm	SHA-256: 1a589a9c6e2c90a48efb9cf6c42763ac9f6966c5bad1c22799b9729445f2aaa5
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-debuginfo-3.36.0-9.el6_10.x86_64.rpm	SHA-256: f83d71888e79f9571c5138bbfd4d1720174fda22b4a1df414cf127b31f3e3444
nss-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 5f62027a1a2393af030d69a3915fe3d7e270b8666c869aada8a684a0315031bb
nss-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bc0f038c2893a14987bb145e0b25f9bbe81fb552e0120e0f0ccd7b4bdaf18003
nss-pkcs11-devel-3.36.0-9.el6_10.i686.rpm	SHA-256: 718d8d2eb59fa900cfcba170922770aa3d4eb8563fa13718fbe189456b24ab45
nss-pkcs11-devel-3.36.0-9.el6_10.x86_64.rpm	SHA-256: bec90925c060a4e7672d81fb4cbafa7bea50896100c81752cb754b3bf870e978
nss-sysinit-3.36.0-9.el6_10.x86_64.rpm	SHA-256: 4397d76be33826df27d8f3bd19dfa71110dd5428afb105675fb79a581d7949ca
nss-tools-3.36.0-9.el6_10.x86_64.rpm	SHA-256: d54c3ca5f16a5a56a0bbb9f197fc6cc53b2e85c232e5d7763224e560c71e84d2