nss (SL7)

Synopsis: Moderate: nss security and bug fix update
Advisory ID: SLSA-2021:1384-1
Issue Date: 2021-04-27
CVE Numbers: CVE-2020-25648

Security Fix(es):

* nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE

Bug Fix(es):

* FTBFS: Paypal Cert expired

* FTBFS: IKE CLASS_1563 fails gtest

* Cannot compile code with nss headers and -Werror=strict-prototypes

* CA HSM ncipher token disabled after SL-7.9 update

– nss-3.53.1-7.el7_9.i686.rpm
– nss-3.53.1-7.el7_9.x86_64.rpm
– nss-debuginfo-3.53.1-7.el7_9.i686.rpm
– nss-debuginfo-3.53.1-7.el7_9.x86_64.rpm
– nss-devel-3.53.1-7.el7_9.i686.rpm
– nss-devel-3.53.1-7.el7_9.x86_64.rpm
– nss-pkcs11-devel-3.53.1-7.el7_9.i686.rpm
– nss-pkcs11-devel-3.53.1-7.el7_9.x86_64.rpm
– nss-sysinit-3.53.1-7.el7_9.x86_64.rpm
– nss-tools-3.53.1-7.el7_9.x86_64.rpm

– Scientific Linux Development Team