[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2014:1073-01 -- Redhat nss, nss-softokn, nss-util

ID: oval:org.secpod.oval:def:501366Date: (C)2014-08-25   (M)2024-02-19
Class: PATCHFamily: unix




Network Security Services is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSLv3, TLS, and other security standards. It was found that the implementation of Internationalizing Domain Names in Applications hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid. In addition, the nss, nss-util, and nss-softokn packages have been upgraded to upstream version 3.16.2, which provides a number of bug fixes and enhancements over the previous versions. Users of NSS are advised to upgrade to these updated packages, which correct these issues and add these enhancements. After installing this update, applications using NSS must be restarted for this update to take effect.

Platform:
Red Hat Enterprise Linux 7
Product:
nss
nss-softokn
nss-util
Reference:
RHSA-2014:1073-01
CVE-2014-1492
CVE    1
CVE-2014-1492
CPE    4
cpe:/o:redhat:enterprise_linux:7
cpe:/a:nss:network_security_services
cpe:/a:nss:nss-util
cpe:/a:nss:nss-softokn
...

© SecPod Technologies