Bug 919174 - Rebase to nss-util 3.14.3 as part of the fix for the lucky-13 issue [rhel-6.5]
Summary: Rebase to nss-util 3.14.3 as part of the fix for the lucky-13 issue [rhel-6.5]
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: nss-util
Version: 6.5
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: rc
: ---
Assignee: Elio Maldonado Batiz
QA Contact: Hubert Kario
URL:
Whiteboard:
Depends On: 919180
Blocks: 918950 919172 927171
TreeView+ depends on / blocked
 
Reported: 2013-03-07 18:57 UTC by Elio Maldonado Batiz
Modified: 2013-11-21 06:12 UTC (History)
5 users (show)

Fixed In Version: nss-util-3.14.3-1.el6
Doc Type: Rebase: Bug Fixes and Enhancements
Doc Text:
This advisory rebases the nss-util package along with nss to version 3.15.1. This update addressess CVE-2013-1620 - Non-constant time CBC decoding results in padding oracle, aka Lucky Thirteen attack. Bug 822365
Clone Of:
Environment:
Last Closed: 2013-11-21 06:12:22 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2013:1558 normal SHIPPED_LIVE nss and nspr bug fix and enhancement update 2013-11-21 00:40:48 UTC

Description Elio Maldonado Batiz 2013-03-07 18:57:57 UTC
Description of problem: In order to fix Bug 918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue, we need to rebase nss-util as well to match the nss version.

Comment 7 errata-xmlrpc 2013-11-21 06:12:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-1558.html


Note You need to log in before you can comment on or make changes to this bug.