Bug 1825270

Summary: Name Constraints validation: CN treated as DNS name even when syntactically invalid as DNS name
Product: Red Hat Enterprise Linux 8 Reporter: Hubert Kario <hkario>
Component: nssAssignee: nss-nspr-maint <nss-nspr-maint>
Status: CLOSED ERRATA QA Contact: Ivan Nikolchev <inikolch>
Severity: high Docs Contact:
Priority: urgent    
Version: 8.3CC: asosedki, cheimes, dconsoli, ddas, dueno, ekeck, ftweedal, hkario, inikolch, pkulkarn, rrelyea, ssorce, szidek, thoger, toneata, tscherf
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: 8.0   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: nss-3.53.1-6.el8_2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1737910 Environment:
Last Closed: 2020-08-03 13:01:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1737910, 1809549    
Bug Blocks:    

Comment 5 Simo Sorce 2020-05-06 13:12:30 UTC 
Given NSS rebase in Z-streams as per special Firefox support policy I am adding Z-stream+ w/o pulling in Mark directly.
Comment 12 errata-xmlrpc 2020-08-03 13:01:34 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:3280