Back to bug 797939

Who When What Removed Added
Justin Ross 2012-02-27 15:13:47 UTC Priority unspecified high
Leonid Zhaldybin 2012-02-27 15:39:09 UTC CC lzhaldyb
QA Contact mrgqe-bugs lzhaldyb
Justin Ross 2012-02-27 16:07:11 UTC Blocks 797959
Justin Ross 2012-02-27 16:44:30 UTC Status ASSIGNED MODIFIED
Fixed In Version qpid-cpp-mrg-0.10-10.el5
errata-xmlrpc 2012-02-27 16:46:20 UTC Status MODIFIED ON_QA
Leonid Zhaldybin 2012-02-27 18:24:53 UTC Status ON_QA VERIFIED
Jeff Needle 2012-02-27 20:45:40 UTC Status VERIFIED ASSIGNED
Target Release --- 5.8
Version 2.0 5.8
Component qpid-cpp nss
Assignee jross emaldona
QA Contact lzhaldyb qe-baseos-security
Product Red Hat Enterprise MRG Red Hat Enterprise Linux 5
Brian Gollaher 2012-02-28 17:23:56 UTC CC briang
Suzanne Logcher 2012-02-28 18:02:36 UTC CC syeghiay
Fixed In Version qpid-cpp-mrg-0.10-10.el5
Kai Engert (:kaie) (inactive account) 2012-02-28 18:06:28 UTC CC kengert
Elio Maldonado Batiz 2012-02-28 19:02:39 UTC Attachment #566380 Flags review?
Kai Engert (:kaie) (inactive account) 2012-02-28 19:54:31 UTC Attachment #566380 Flags review+
Elio Maldonado Batiz 2012-02-28 22:22:13 UTC Status ASSIGNED MODIFIED
Fixed In Version nss-3.13.1-4.el5
Elio Maldonado Batiz 2012-02-28 22:33:50 UTC Attachment #566380 Attachment description Protect NSS_Shutdown against client thatr don't initialize nss Protect NSS_Shutdown against clients that don't initialize nss
Elio Maldonado Batiz 2012-02-28 22:34:14 UTC Attachment #566380 Flags review?
RHEL Program Management 2012-02-28 22:57:56 UTC Blocks 798462
RHEL Program Management 2012-02-28 22:58:23 UTC Keywords ZStream
RHEL Program Management 2012-02-28 22:58:28 UTC Target Milestone --- rc
Aleš Mareček 2012-06-26 11:34:06 UTC CC amarecek
Tomas Hoger 2012-07-23 09:27:27 UTC CC thoger
Kai Engert (:kaie) (inactive account) 2012-07-25 10:21:14 UTC Status MODIFIED ON_QA
errata-xmlrpc 2012-08-22 10:41:01 UTC Status ON_QA VERIFIED
Aleš Mareček 2012-08-22 10:50:44 UTC QA Contact qe-baseos-security amarecek
Elio Maldonado Batiz 2012-09-25 16:52:01 UTC Doc Text Cause: Some packages call nss without initializing as mandated by the API and nss did not protect itself against such improper usage.

Consequence: This caused crashes on shutdown as some variables haven't been properly initialized. Such crashes were reported in the messaging daemon (qpidd) included in Red Hat Enterprise MRG after a recent update to nss. This occurred as qpidd made nss calls before initializing nss.

Fix: Wit this fix nss now protects itself against potential improper use by client code.

Result: With this update nss prevents qpidd, and other affected processes that may call nss without initializing as mandated by the API, from crashing
errata-xmlrpc 2012-12-10 01:02:57 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2013-01-08 07:38:45 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2013-01-08 02:38:45 UTC

Back to bug 797939