--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2018-1a7a5c54c2
2018-09-14 23:11:42.963781
--------------------------------------------------------------------------------Name        : nss-softokn
Product     : Fedora 28
Version     : 3.39.0
Release     : 1.0.fc28
URL         : https://firefox-source-docs.mozilla.org/security/nss/index.html
Summary     : Network Security Services Softoken Module
Description :
Network Security Services Softoken Cryptographic Module

--------------------------------------------------------------------------------Update Information:

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39.  For
details about new functionality and a list of bugs fixed in this release please
see the upstream release notes  --------------------------------------------------------------------------------ChangeLog:

* Mon Sep  3 2018 Daiki Ueno  - 3.39.0-1.0
- Update to NSS 3.39
* Tue Jul  3 2018 Daiki Ueno  - 3.38.0-1.0
- Update to NSS 3.38
* Tue Jun  5 2018 Daiki Ueno  - 3.37.3-1.1
- Fix partial injection of LDFLAGS (the original relro flags are also
  set by redhat-rpm-config)
- Enable FIPS startup test
* Tue Jun  5 2018 Daiki Ueno  - 3.37.3-1.0
- Update to NSS 3.37.3
* Mon May 28 2018 Daiki Ueno  - 3.37.1-1.0
- Update to NSS 3.37.1
* Thu May  3 2018 Kai Engert  - 3.36.1-1.1
- Upstream patch to automatically enable SQL DB caching based on
  filesystem type, mozbz#1456888
* Wed Apr 11 2018 Daiki Ueno  - 3.36.1-1.0
- Update to NSS 3.36.1
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1624704 - CVE-2018-12384 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1624704
  [ 2 ] Bug #1620207 - Enable SSLKEYLOGFILE support
        https://bugzilla.redhat.com/show_bug.cgi?id=1620207
  [ 3 ] Bug #1578106 - Package version is invalid, or no Source URL provided
        https://bugzilla.redhat.com/show_bug.cgi?id=1578106
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-1a7a5c54c2' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Fedora 28: nss-softokn Security Update

September 14, 2018
Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39

Summary

Network Security Services Softoken Cryptographic Module

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For

details about new functionality and a list of bugs fixed in this release please

* Mon Sep 3 2018 Daiki Ueno - 3.39.0-1.0

- Update to NSS 3.39

* Tue Jul 3 2018 Daiki Ueno - 3.38.0-1.0

- Update to NSS 3.38

* Tue Jun 5 2018 Daiki Ueno - 3.37.3-1.1

- Fix partial injection of LDFLAGS (the original relro flags are also

set by redhat-rpm-config)

- Enable FIPS startup test

* Tue Jun 5 2018 Daiki Ueno - 3.37.3-1.0

- Update to NSS 3.37.3

* Mon May 28 2018 Daiki Ueno - 3.37.1-1.0

- Update to NSS 3.37.1

* Thu May 3 2018 Kai Engert - 3.36.1-1.1

- Upstream patch to automatically enable SQL DB caching based on

filesystem type, mozbz#1456888

* Wed Apr 11 2018 Daiki Ueno - 3.36.1-1.0

- Update to NSS 3.36.1

[ 1 ] Bug #1624704 - CVE-2018-12384 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1624704

[ 2 ] Bug #1620207 - Enable SSLKEYLOGFILE support

https://bugzilla.redhat.com/show_bug.cgi?id=1620207

[ 3 ] Bug #1578106 - Package version is invalid, or no Source URL provided

https://bugzilla.redhat.com/show_bug.cgi?id=1578106

su -c 'dnf upgrade --advisory FEDORA-2018-1a7a5c54c2' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

FEDORA-2018-1a7a5c54c2 2018-09-14 23:11:42.963781 Product : Fedora 28 Version : 3.39.0 Release : 1.0.fc28 URL : https://firefox-source-docs.mozilla.org/security/nss/index.html Summary : Network Security Services Softoken Module Description : Network Security Services Softoken Cryptographic Module Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please * Mon Sep 3 2018 Daiki Ueno - 3.39.0-1.0 - Update to NSS 3.39 * Tue Jul 3 2018 Daiki Ueno - 3.38.0-1.0 - Update to NSS 3.38 * Tue Jun 5 2018 Daiki Ueno - 3.37.3-1.1 - Fix partial injection of LDFLAGS (the original relro flags are also set by redhat-rpm-config) - Enable FIPS startup test * Tue Jun 5 2018 Daiki Ueno - 3.37.3-1.0 - Update to NSS 3.37.3 * Mon May 28 2018 Daiki Ueno - 3.37.1-1.0 - Update to NSS 3.37.1 * Thu May 3 2018 Kai Engert - 3.36.1-1.1 - Upstream patch to automatically enable SQL DB caching based on filesystem type, mozbz#1456888 * Wed Apr 11 2018 Daiki Ueno - 3.36.1-1.0 - Update to NSS 3.36.1 [ 1 ] Bug #1624704 - CVE-2018-12384 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1624704 [ 2 ] Bug #1620207 - Enable SSLKEYLOGFILE support https://bugzilla.redhat.com/show_bug.cgi?id=1620207 [ 3 ] Bug #1578106 - Package version is invalid, or no Source URL provided https://bugzilla.redhat.com/show_bug.cgi?id=1578106 su -c 'dnf upgrade --advisory FEDORA-2018-1a7a5c54c2' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
Product : Fedora 28
Version : 3.39.0
Release : 1.0.fc28
URL : https://firefox-source-docs.mozilla.org/security/nss/index.html
Summary : Network Security Services Softoken Module

Related News