Update to nss-3.14.3

This is a patch release to address CVE-2013-1620.

Detailed descriptions of the bugs fixed by nss-3.14.3 can be found in the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS_3.14.3_release_notes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

This update also fixes the following bugs :

  - A defect in the FreeBL library implementation of the     Diffie-Hellman (DH) protocol previously caused Openswan     to drop connections.

  - A memory leak in the nssutil_ReadSecmodDB() function has     been fixed.

In addition, the nss package has been upgraded to upstream version 3.14.3, and the nspr package has been upgraded to upstream version 4.9.5. These updates provide a number of bug fixes and enhancements over the previous versions.

Note that while upstream NSS version 3.14 prevents the use of certificates that have an MD5 signature, this erratum includes a patch that allows such certificates by default. To prevent the use of certificates that have an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT' environment variable to '-MD5'.

After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1144 advisory.

    nspr     [4.9.5-2]
    - Update to NSPR_4_9_5_RTM
    - Resolves: rhbz#927186 - Rebase to nspr-4.9.5
    - Add upstream URL for an existing patch per packaging guidelines

    [4.9.5-1]
    - Resolves: Rebase to nspr-4.9.5

    [4.9.2-1]
    - Update to nspr-4.9.2
    - Related: rhbz#863286

    nss     [3.14.3-4.0.1.el6_4]
    - Added nss-vendor.patch to change vendor

    [3.14.3-4]
    - Revert to accepting MD5 on digital signatures by default
    - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled

    [3.14.3-3]
    - Ensure pem uses system freebl as with this update freebl brings in new API's
    - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue

    [3.14.3-2]
    - Install sechash.h and secmodt.h which are now provided by nss-devel
    - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
    - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken

    [3.14.3-1]
    - Update to NSS_3.14.3_RTM
    - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
    - Update expired test certificates (fixed in upstream bug 852781)
    - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
    - Reactivate the aia tests

    nss-softokn     [3.14.3-3]
    - Add patch to conditionally compile according to old or new sqlite api
    - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
    - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue

    [3.14.3-2]
    - Revert to using a code patch for relro support
    - Related: rhbz#927158

    [3.14.3-1]
    - Update to NSS_3_14_3_RTM
    - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
    - Add export LD_LIBRARY_PATH=//usr/lib before the signing commands in __spec_install_post scriplet     to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
    - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
    - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
    - Update the licence to MPLv2.0

    [3.12.9-12]
    - Bootstrapping of the builroot in preparation for rebase to 3.14.3
    - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
    - With 3.14.3 hasht.h will be provided by nss-util-devel
    - Related: rhbz#927158 - rebase nss-softokn to 3.14.3

    nss-util     [3.14.3-3]
    - Resolves: rhbz#984967 - nssutil_ReadSecmodDB leaks memory

    [3.14.3-2]
    - Revert to accepting MD5 on digital signatures by default
    - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled

    [3.14.3-1]
    - Update to NSS_3_14_3_RTM
    - Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A flaw was found in the way NSS handled invalid handshake packets. A remote attacker could use this flaw to cause a TLS/SSL client using NSS to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-5605)

It was found that the fix for CVE-2013-1620 introduced a regression causing NSS to read uninitialized data when a decryption failure occurred. A remote attacker could use this flaw to cause a TLS/SSL server using NSS to crash. (CVE-2013-1739)

An integer overflow flaw was discovered in both NSS and NSPR's implementation of certification parsing on 64-bit systems. A remote attacker could use these flaws to cause an application using NSS or NSPR to crash. (CVE-2013-1741 , CVE-2013-5607)

It was discovered that NSS did not reject certificates with incompatible key usage constraints when validating them while the verifyLog feature was enabled. An application using the NSS certificate validation API could accept an invalid certificate.
(CVE-2013-5606)

An updated rhev-hypervisor6 package that fixes three security issues and various bugs is now available.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization Hypervisor through the 3.2 Manager administration portal, the Host may appear with the status of 'Install Failed'. If this happens, place the host into maintenance mode, then activate it again to get the host back to an 'Up' state.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

It was found that the fix for CVE-2013-0167 released via RHSA-2013:0907 was incomplete. A privileged guest user could potentially use this flaw to make the host the guest is running on unavailable to the management server. (CVE-2013-4236)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

Red Hat would like to thank the Mozilla project for reporting CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter of CVE-2013-0791. The CVE-2013-4236 issue was found by David Gibson of Red Hat.

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2013-4854 (bind issue)

CVE-2012-6544, CVE-2013-2146, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232, and CVE-2013-2237 (kernel issues)

This update also contains the fixes from the following errata :

* vdsm: RHSA-2013:1155 and RHBA-2013:1158

Users of the Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which corrects these issues.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-664:03 advisory.

    nss Network Security Services (NSS) is a set of libraries designed to support cross-platform development     of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3,     TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.
    nspr NSPR provides platform independence for non-GUI operating system facilities. These facilities include     threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic     memory management (malloc and free) and shared library linking.
    Security issues fixed with this release:
     CVE-2013-0791     The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox     before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before     17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service     (out-of-bounds read and memory corruption) via a crafted certificate.
     CVE-2013-1620     The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-     channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding,     which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via     statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
    Fixed bugs:
     Previously, a defect in the FreeBL library implementation of the Diffie-Hellman (DH) protocol caused     Openswan to drop connections; this has been fixed.
     Fixed a memory leak in the nssutil_ReadSecmodDB() function.
     nss now protects itself against being called before it has been properly initialized by the caller.
     Previously the certutil -H command did not describe the -F option. This has been fixed.
     Previously, a bug in the FreeBL library made the Openswan application generate a Key Exchange payload     that was one byte shorter than what was required by the Diffie Hellman (DH) protocol, and Openswan would     drop connections. This has been fixed.
     Previously, the remote-viewer utility failed to utilize a plugged-in smart card reader when a Spice     client was running and the client could eventually crash. This has been fixed.
     Incorporated various GCM code fixes.
    Enhancement:
     Added support for the NIST Suite B set of recommended algorithms for Elliptic Curve Cryptography.
    After installation, applications using NSS or NSPR must be restarted for this update to take effect.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated nss and nspr packages that fix two security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

Red Hat would like to thank the Mozilla project for reporting CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter of CVE-2013-0791.

This update also fixes the following bugs :

* A defect in the FreeBL library implementation of the Diffie-Hellman (DH) protocol previously caused Openswan to drop connections.
(BZ#958023)

* A memory leak in the nssutil_ReadSecmodDB() function has been fixed.
(BZ#986969)

In addition, the nss package has been upgraded to upstream version 3.14.3, and the nspr package has been upgraded to upstream version 4.9.5. These updates provide a number of bug fixes and enhancements over the previous versions. (BZ#949845, BZ#924741)

Note that while upstream NSS version 3.14 prevents the use of certificates that have an MD5 signature, this erratum includes a patch that allows such certificates by default. To prevent the use of certificates that have an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT' environment variable to '-MD5'.

Users of NSS and NSPR are advised to upgrade to these updated packages, which fix these issues and add these enhancements. After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-1620)

An out-of-bounds memory read flaw was found in the way NSS decoded certain certificates. If an application using NSS decoded a malformed certificate, it could cause the application to crash. (CVE-2013-0791)

a. Update to ESX service console kernel

The ESX service console kernel is updated to resolve multiple security issues.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2012-2372, CVE-2012-3552, CVE-2013-2147, CVE-2013-2164, CVE-2013-2206, CVE-2013-2224, CVE-2013-2234, CVE-2013-2237, CVE-2013-2232 to these issues.

b. Update to ESX service console NSPR and NSS

This patch updates the ESX service console Netscape Portable Runtime (NSPR) and Network Security Services (NSS) RPMs to resolve multiple security issues. 

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2013-0791 and CVE-2013-1620 to these issues.

A flaw was found in the way NSS handled invalid handshake packets. A remote attacker could use this flaw to cause a TLS/SSL client using NSS to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2013-5605)

It was found that the fix for CVE-2013-1620 released via SLSA-2013:1135 introduced a regression causing NSS to read uninitialized data when a decryption failure occurred. A remote attacker could use this flaw to cause a TLS/SSL server using NSS to crash. (CVE-2013-1739)

An integer overflow flaw was discovered in both NSS and NSPR's implementation of certification parsing on 64-bit systems. A remote attacker could use these flaws to cause an application using NSS or NSPR to crash. (CVE-2013-1741, CVE-2013-5607)

It was discovered that NSS did not reject certificates with incompatible key usage constraints when validating them while the verifyLog feature was enabled. An application using the NSS certificate validation API could accept an invalid certificate.
(CVE-2013-5606)

In addition, the nss package has been upgraded to upstream version 3.15.3, and the nspr package has been upgraded to upstream version 4.10.2. These updates provide a number of bug fixes and enhancements over the previous versions.

This update also fixes the following bug :

  - The SLBA-2013:1318 update introduced a regression that     prevented the use of certificates that have an MD5     signature. This update fixes this regression and     certificates that have an MD5 signature are once again     supported. To prevent the use of certificates that have     an MD5 signature, set the 'NSS_HASH_ALG_SUPPORT'     environment variable to '-MD5'.

After installing this update, applications using NSS or NSPR must be restarted for this update to take effect.

The remote host is affected by the vulnerability described in GLSA-201406-19 (Mozilla Network Security Service: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the Mozilla Network       Security Service. Please review the CVE identifiers referenced below for       more details about the vulnerabilities.
  Impact :

    A remote attacker can cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
65532	Fedora 17 : nspr-4.9.5-2.fc17 / nss-3.14.3-1.fc17 / nss-softokn-3.14.3-1.fc17 / etc (2013-3079)	Nessus	Fedora Local Security Checks	2013/3/14	2021/1/11	medium
69223	Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20130805)	Nessus	Scientific Linux Local Security Checks	2013/8/6	2021/1/14	medium
69253	Oracle Linux 6 : nss, / nss-util, / nss-softokn, / and / nspr (ELSA-2013-1144)	Nessus	Oracle Linux Local Security Checks	2013/8/8	2025/4/29	high
71577	Amazon Linux AMI : nss (ALAS-2013-265)	Nessus	Amazon Linux Local Security Checks	2013/12/23	2018/4/18	high
78969	RHEL 6 : rhev-hypervisor6 (RHSA-2013:1181)	Nessus	Red Hat Local Security Checks	2014/11/8	2021/1/14	medium
291466	MiracleLinux 3 : nspr-4.9.5-2.AXS3, nss-3.14.3-18.AXS3 (AXSA:2013-664:03)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	high
69215	CentOS 5 : nss (CESA-2013:1135)	Nessus	CentOS Local Security Checks	2013/8/6	2021/1/4	medium
70221	Amazon Linux AMI : nss (ALAS-2013-217)	Nessus	Amazon Linux Local Security Checks	2013/10/1	2018/4/18	medium
71245	VMSA-2013-0015 : VMware ESX updates to third-party libraries	Nessus	VMware ESX Local Security Checks	2013/12/6	2021/1/6	medium
71306	Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20131205)	Nessus	Scientific Linux Local Security Checks	2013/12/10	2021/1/14	high
76178	GLSA-201406-19 : Mozilla Network Security Service: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/6/23	2021/1/6	medium

检测

插件搜索

medium

medium

high

high

medium

high

medium

medium

medium

high

medium