Synopsis: Moderate: nss security and bug fix update
Advisory ID: SLSA-2021:1384-1
Issue Date: 2021-04-27
CVE Numbers: CVE-2020-25648
—
Security Fix(es):
* nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
Bug Fix(es):
* FTBFS: Paypal Cert expired
* FTBFS: IKE CLASS_1563 fails gtest
* Cannot compile code with nss headers and -Werror=strict-prototypes
* CA HSM ncipher token disabled after SL-7.9 update
—
SL7
x86_64
– nss-3.53.1-7.el7_9.i686.rpm
– nss-3.53.1-7.el7_9.x86_64.rpm
– nss-debuginfo-3.53.1-7.el7_9.i686.rpm
– nss-debuginfo-3.53.1-7.el7_9.x86_64.rpm
– nss-devel-3.53.1-7.el7_9.i686.rpm
– nss-devel-3.53.1-7.el7_9.x86_64.rpm
– nss-pkcs11-devel-3.53.1-7.el7_9.i686.rpm
– nss-pkcs11-devel-3.53.1-7.el7_9.x86_64.rpm
– nss-sysinit-3.53.1-7.el7_9.x86_64.rpm
– nss-tools-3.53.1-7.el7_9.x86_64.rpm
—
– Scientific Linux Development Team
