ID

VAR-201505-0233

CVE

CVE-2015-4000

TITLE

TLS Encryption problem vulnerability

DESCRIPTION

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. OpenSSL is prone to a security-bypass vulnerability because the application fails to properly verify SSL, TLS, and DTLS certificates. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks and bypass certain security restrictions. This may aid in further attacks. OpenSSL versions 1.0.2c, 1.0.2b, 1.0.1n, and 1.0.1o are vulnerable. ============================================================================ Ubuntu Security Notice USN-2656-2 July 15, 2015 firefox vulnerabilities ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Firefox could be made to crash or run programs as your login if it opened a malicious website. Software Description: - firefox: Mozilla Open Source web browser Details: USN-2656-1 fixed vulnerabilities in Firefox for Ubuntu 14.04 LTS and later releases. This update provides the corresponding update for Ubuntu 12.04 LTS. Original advisory details: Karthikeyan Bhargavan discovered that NSS incorrectly handled state transitions for the TLS state machine. (CVE-2015-2721) Looben Yan discovered 2 use-after-free issues when using XMLHttpRequest in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-2722, CVE-2015-2733) Bob Clary, Christian Holler, Bobby Holley, Andrew McCreight, Terrence Cole, Steve Fink, Mats Palmgren, Wes Kocher, Andreas Pehrson, Tooru Fujisawa, Andrew Sutherland, and Gary Kwong discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-2724, CVE-2015-2725, CVE-2015-2726) Armin Razmdjou discovered that opening hyperlinks with specific mouse and key combinations could allow a Chrome privileged URL to be opened without context restrictions being preserved. (CVE-2015-2727) Paul Bandha discovered a type confusion bug in the Indexed DB Manager. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2015-2728) Holger Fuhrmannek discovered an out-of-bounds read in Web Audio. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to obtain sensitive information. (CVE-2015-2729) Watson Ladd discovered that NSS incorrectly handled Elliptical Curve Cryptography (ECC) multiplication. A remote attacker could possibly use this issue to spoof ECDSA signatures. (CVE-2015-2730) A use-after-free was discovered when a Content Policy modifies the DOM to remove a DOM object. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2015-2731) Ronald Crane discovered multiple security vulnerabilities. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-2734, CVE-2015-2735, CVE-2015-2736, CVE-2015-2737, CVE-2015-2738, CVE-2015-2739, CVE-2015-2740) David Keeler discovered that key pinning checks can be skipped when an overridable certificate error occurs. This allows a user to manually override an error for a fake certificate, but cannot be exploited on its own. (CVE-2015-2741) Jonas Jenwald discovered that some internal workers were incorrectly executed with a high privilege. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this in combination with another security vulnerability, to execute arbitrary code in a privileged scope. (CVE-2015-2743) Matthew Green discovered a DHE key processing issue in NSS where a MITM could force a server to downgrade TLS connections to 512-bit export-grade cryptography. An attacker could potentially exploit this to impersonate the server. (CVE-2015-4000) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: firefox 39.0+build5-0ubuntu0.12.04.2 After a standard system update you need to restart Firefox to make all the necessary changes. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4760, CVE-2015-4748) Several vulnerabilities were discovered in the cryptographic components of the OpenJDK JRE. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. (CVE-2015-2621, CVE-2015-2632) A vulnerability was discovered with how the JNDI component of the OpenJDK JRE handles DNS resolutions. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n a-c04926789 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04926789 Version: 1 HPSBUX03435 SSRT102977 rev.1 - HP-UX Web Server Suite running Apache, Remote Denial of Service (DoS) NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2016-01-07 Last Updated: 2016-01-07 Potential Security Impact: Remote Denial of Service (DoS) Source: Hewlett Packard Enterprise, Product Security Response Team VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HP-UX Web Server Suite running Apache on HP-UX 11iv3. These vulnerabilities could be exploited remotely to create a Denial of Service (DoS) and other impacts including: The TLS vulnerability using US export-grade 512-bit keys in Diffie-Hellman key exchange known as "Logjam" could be exploited remotely to allow unauthorized modification. The RC4 stream cipher vulnerability in SSL/TLS known as "Bar Mitzvah" could be exploited remotely to allow disclosure of information. Apache does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters. References: CVE-2015-4000 CVE-2015-2808 CVE-2015-3183 PSRT102977 SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. HP-UX Web Server Suite v4.05 HPUXWSATW405 httpd prior to 2.2.29.02 BACKGROUND CVSS 2.0 Base Metrics =========================================================== Reference Base Vector Base Score CVE-2015-4000 (AV:N/AC:M/Au:N/C:N/I:P/A:N) 4.3 CVE-2015-2808 (AV:N/AC:M/Au:N/C:P/I:N/A:N) 4.3 CVE-2015-3183 (AV:N/AC:L/Au:N/C:N/I:P/A:N) 5.0 =========================================================== Information on CVSS is documented in HP Customer Notice: HPSN-2008-002 RESOLUTION HPE has provided the following software updates to resolve the vulnerabilities with HP-UX Web Server Suite running Apache. The updates are available for download from the following location: https://h20392.www2.hpe.com/portal/swdepot/displayProductInfo.do?productNumbe r=HPUXWSATW406 Issues addressed: CVE-2015-4000: Disable Export cipher by default. DH parameter with 1024 bits is used by default. Allow to configure custom DHE or ECDHE parameters by appending the concerned parameter file to the certificate file given for the SSLCertificateFile directive. CVE-2015-2808: Disable RC4 cipher in configuration file. Notes: HP-UX Web Server Suite v4.06 HPUXWSATW406 contains the following components: Apache B.2.2.29.02 Tomcat Servlet Engine C.6.0.43.01 PHP 5.4.40.1 (Part of Apache) Webmin A.1.070.13 See HPE Security Bulletin HPSBUX03512 for information about resolution for Apache web server of HP-UX 11iv2 at the following location: https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04832246 MANUAL ACTIONS: Yes - Update Download and install the software update PRODUCT SPECIFIC INFORMATION HP-UX Software Assistant: HP-UX Software Assistant is an enhanced application that replaces HP-UX Security Patch Check. It analyzes all Security Bulletins issued by HPE and lists recommended actions that may apply to a specific HP-UX system. It can also download patches and create a depot automatically. For more information see: https://www.hp.com/go/swa The following text is for use by the HP-UX Software Assistant. AFFECTED VERSIONS HP-UX B.11.31 IA/PA =================== hpuxws22APACHE.APACHE hpuxws22APACHE.AUTH_LDAP hpuxws22APACHE.MOD_JK hpuxws22APACHE.MOD_PERL hpuxws22APACHE.PHP hpuxws22APACHE.WEBPROXY action: install revision B.2.2.29.02 or subsequent hpuxws22TOMCAT.TOMCAT action: install revision C.6.0.43.01 or subsequent HP-UX B.11.31 PA ================ hpuxws22APACHE.APACHE2 hpuxws22APACHE.AUTH_LDAP2 hpuxws22APACHE.MOD_JK2 hpuxws22APACHE.MOD_PERL2 hpuxws22APACHE.PHP2 hpuxws22APACHE.WEBPROXY2 action: install revision B.2.2.29.02 or subsequent HP-UX B.11.23 IA/PA =================== hpuxws22WEBMIN.HPDOCS hpuxws22WEBMIN.WEBMIN action: install revision A.1.070.13 or subsequent END AFFECTED VERSIONS HISTORY Version:1 (rev.1) - 7 January 2016 Initial release Third Party Security Patches: Third party security patches that are to be installed on systems running Hewlett Packard Enterprise (HPE) software products should be applied in accordance with the customer's patch management policy. Support: For issues about implementing the recommendations of this Security Bulletin, contact normal HPE Services support channel. For other issues about the content of this Security Bulletin, send e-mail to security-alert@hpe.com. Report: To report a potential security vulnerability with any HPE supported product, send Email to: security-alert@hpe.com Subscribe: To initiate a subscription to receive future HPE Security Bulletin alerts via Email: http://www.hpe.com/support/Subscriber_Choice Security Bulletin Archive: A list of recently released Security Bulletins is available here: http://www.hpe.com/support/Security_Bulletin_Archive Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB. 3C = 3COM 3P = 3rd Party Software GN = HPE General Software HF = HPE Hardware and Firmware MU = Multi-Platform Software NS = NonStop Servers OV = OpenVMS PV = ProCurve ST = Storage Software UX = HP-UX Copyright 2016 Hewlett Packard Enterprise Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett Packard Enterprise and the names of Hewlett Packard Enterprise products referenced herein are trademarks of Hewlett Packard Enterprise in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners. This may allow remote disclosure of information. Do the following to mitigate the logjam issue in HP-UX Firefox and Thunderbird: HP-UX Firefox browser: Visit about:config in the Firefox browser Search for ssl3 and disable DHE_EXPORT ciphers by setting below preferences values to false. security.ssl3.dhe_rsa_aes_128_sha security.ssl3.dhe_rsa_aes_256_sha Restart the browser HP-UX Thunderbird: Select "Preferences" from the "Edit" menu Select "Advanced" Tab and then click on "Config Editor" button Search for security.ssl3.dhe_rsa_aes and disable DHE_EXPORT ciphers by setting below preference values to false. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: nss security update Advisory ID: RHSA-2015:1185-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1185.html Issue date: 2015-06-25 CVE Names: CVE-2015-4000 ===================================================================== 1. Summary: Updated nss and nss-util packages that fix one security issue, several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. A flaw was found in the way the TLS protocol composes the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. (CVE-2015-4000) Note: This update forces the TLS/SSL client implementation in NSS to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Future updates may raise this limit to 1024 bits. The nss and nss-util packages have been upgraded to upstream versions 3.19.1. The upgraded versions provide a number of bug fixes and enhancements over the previous versions. Users of nss and nss-util are advised to upgrade to these updated packages, which fix these security flaws, bugs, and add these enhancements. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1223211 - CVE-2015-4000 LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: nss-3.19.1-3.el6_6.src.rpm nss-util-3.19.1-1.el6_6.src.rpm i386: nss-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-sysinit-3.19.1-3.el6_6.i686.rpm nss-tools-3.19.1-3.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm x86_64: nss-3.19.1-3.el6_6.i686.rpm nss-3.19.1-3.el6_6.x86_64.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-sysinit-3.19.1-3.el6_6.x86_64.rpm nss-tools-3.19.1-3.el6_6.x86_64.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): i386: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm x86_64: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: nss-3.19.1-3.el6_6.src.rpm nss-util-3.19.1-1.el6_6.src.rpm x86_64: nss-3.19.1-3.el6_6.i686.rpm nss-3.19.1-3.el6_6.x86_64.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-sysinit-3.19.1-3.el6_6.x86_64.rpm nss-tools-3.19.1-3.el6_6.x86_64.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): x86_64: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: nss-3.19.1-3.el6_6.src.rpm nss-util-3.19.1-1.el6_6.src.rpm i386: nss-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-sysinit-3.19.1-3.el6_6.i686.rpm nss-tools-3.19.1-3.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm ppc64: nss-3.19.1-3.el6_6.ppc.rpm nss-3.19.1-3.el6_6.ppc64.rpm nss-debuginfo-3.19.1-3.el6_6.ppc.rpm nss-debuginfo-3.19.1-3.el6_6.ppc64.rpm nss-devel-3.19.1-3.el6_6.ppc.rpm nss-devel-3.19.1-3.el6_6.ppc64.rpm nss-sysinit-3.19.1-3.el6_6.ppc64.rpm nss-tools-3.19.1-3.el6_6.ppc64.rpm nss-util-3.19.1-1.el6_6.ppc.rpm nss-util-3.19.1-1.el6_6.ppc64.rpm nss-util-debuginfo-3.19.1-1.el6_6.ppc.rpm nss-util-debuginfo-3.19.1-1.el6_6.ppc64.rpm nss-util-devel-3.19.1-1.el6_6.ppc.rpm nss-util-devel-3.19.1-1.el6_6.ppc64.rpm s390x: nss-3.19.1-3.el6_6.s390.rpm nss-3.19.1-3.el6_6.s390x.rpm nss-debuginfo-3.19.1-3.el6_6.s390.rpm nss-debuginfo-3.19.1-3.el6_6.s390x.rpm nss-devel-3.19.1-3.el6_6.s390.rpm nss-devel-3.19.1-3.el6_6.s390x.rpm nss-sysinit-3.19.1-3.el6_6.s390x.rpm nss-tools-3.19.1-3.el6_6.s390x.rpm nss-util-3.19.1-1.el6_6.s390.rpm nss-util-3.19.1-1.el6_6.s390x.rpm nss-util-debuginfo-3.19.1-1.el6_6.s390.rpm nss-util-debuginfo-3.19.1-1.el6_6.s390x.rpm nss-util-devel-3.19.1-1.el6_6.s390.rpm nss-util-devel-3.19.1-1.el6_6.s390x.rpm x86_64: nss-3.19.1-3.el6_6.i686.rpm nss-3.19.1-3.el6_6.x86_64.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.x86_64.rpm nss-sysinit-3.19.1-3.el6_6.x86_64.rpm nss-tools-3.19.1-3.el6_6.x86_64.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): i386: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm ppc64: nss-debuginfo-3.19.1-3.el6_6.ppc.rpm nss-debuginfo-3.19.1-3.el6_6.ppc64.rpm nss-pkcs11-devel-3.19.1-3.el6_6.ppc.rpm nss-pkcs11-devel-3.19.1-3.el6_6.ppc64.rpm s390x: nss-debuginfo-3.19.1-3.el6_6.s390.rpm nss-debuginfo-3.19.1-3.el6_6.s390x.rpm nss-pkcs11-devel-3.19.1-3.el6_6.s390.rpm nss-pkcs11-devel-3.19.1-3.el6_6.s390x.rpm x86_64: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: nss-3.19.1-3.el6_6.src.rpm nss-util-3.19.1-1.el6_6.src.rpm i386: nss-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-sysinit-3.19.1-3.el6_6.i686.rpm nss-tools-3.19.1-3.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm x86_64: nss-3.19.1-3.el6_6.i686.rpm nss-3.19.1-3.el6_6.x86_64.rpm nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-devel-3.19.1-3.el6_6.i686.rpm nss-devel-3.19.1-3.el6_6.x86_64.rpm nss-sysinit-3.19.1-3.el6_6.x86_64.rpm nss-tools-3.19.1-3.el6_6.x86_64.rpm nss-util-3.19.1-1.el6_6.i686.rpm nss-util-3.19.1-1.el6_6.x86_64.rpm nss-util-debuginfo-3.19.1-1.el6_6.i686.rpm nss-util-debuginfo-3.19.1-1.el6_6.x86_64.rpm nss-util-devel-3.19.1-1.el6_6.i686.rpm nss-util-devel-3.19.1-1.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): i386: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm x86_64: nss-debuginfo-3.19.1-3.el6_6.i686.rpm nss-debuginfo-3.19.1-3.el6_6.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el6_6.i686.rpm nss-pkcs11-devel-3.19.1-3.el6_6.x86_64.rpm Red Hat Enterprise Linux Client (v. 7): Source: nss-3.19.1-3.el7_1.src.rpm nss-util-3.19.1-1.el7_1.src.rpm x86_64: nss-3.19.1-3.el7_1.i686.rpm nss-3.19.1-3.el7_1.x86_64.rpm nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-sysinit-3.19.1-3.el7_1.x86_64.rpm nss-tools-3.19.1-3.el7_1.x86_64.rpm nss-util-3.19.1-1.el7_1.i686.rpm nss-util-3.19.1-1.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-devel-3.19.1-3.el7_1.i686.rpm nss-devel-3.19.1-3.el7_1.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el7_1.i686.rpm nss-pkcs11-devel-3.19.1-3.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm nss-util-devel-3.19.1-1.el7_1.i686.rpm nss-util-devel-3.19.1-1.el7_1.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: nss-3.19.1-3.el7_1.src.rpm nss-util-3.19.1-1.el7_1.src.rpm x86_64: nss-3.19.1-3.el7_1.i686.rpm nss-3.19.1-3.el7_1.x86_64.rpm nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-sysinit-3.19.1-3.el7_1.x86_64.rpm nss-tools-3.19.1-3.el7_1.x86_64.rpm nss-util-3.19.1-1.el7_1.i686.rpm nss-util-3.19.1-1.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-devel-3.19.1-3.el7_1.i686.rpm nss-devel-3.19.1-3.el7_1.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el7_1.i686.rpm nss-pkcs11-devel-3.19.1-3.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm nss-util-devel-3.19.1-1.el7_1.i686.rpm nss-util-devel-3.19.1-1.el7_1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: nss-3.19.1-3.el7_1.src.rpm nss-util-3.19.1-1.el7_1.src.rpm ppc64: nss-3.19.1-3.el7_1.ppc.rpm nss-3.19.1-3.el7_1.ppc64.rpm nss-debuginfo-3.19.1-3.el7_1.ppc.rpm nss-debuginfo-3.19.1-3.el7_1.ppc64.rpm nss-devel-3.19.1-3.el7_1.ppc.rpm nss-devel-3.19.1-3.el7_1.ppc64.rpm nss-sysinit-3.19.1-3.el7_1.ppc64.rpm nss-tools-3.19.1-3.el7_1.ppc64.rpm nss-util-3.19.1-1.el7_1.ppc.rpm nss-util-3.19.1-1.el7_1.ppc64.rpm nss-util-debuginfo-3.19.1-1.el7_1.ppc.rpm nss-util-debuginfo-3.19.1-1.el7_1.ppc64.rpm nss-util-devel-3.19.1-1.el7_1.ppc.rpm nss-util-devel-3.19.1-1.el7_1.ppc64.rpm s390x: nss-3.19.1-3.el7_1.s390.rpm nss-3.19.1-3.el7_1.s390x.rpm nss-debuginfo-3.19.1-3.el7_1.s390.rpm nss-debuginfo-3.19.1-3.el7_1.s390x.rpm nss-devel-3.19.1-3.el7_1.s390.rpm nss-devel-3.19.1-3.el7_1.s390x.rpm nss-sysinit-3.19.1-3.el7_1.s390x.rpm nss-tools-3.19.1-3.el7_1.s390x.rpm nss-util-3.19.1-1.el7_1.s390.rpm nss-util-3.19.1-1.el7_1.s390x.rpm nss-util-debuginfo-3.19.1-1.el7_1.s390.rpm nss-util-debuginfo-3.19.1-1.el7_1.s390x.rpm nss-util-devel-3.19.1-1.el7_1.s390.rpm nss-util-devel-3.19.1-1.el7_1.s390x.rpm x86_64: nss-3.19.1-3.el7_1.i686.rpm nss-3.19.1-3.el7_1.x86_64.rpm nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-devel-3.19.1-3.el7_1.i686.rpm nss-devel-3.19.1-3.el7_1.x86_64.rpm nss-sysinit-3.19.1-3.el7_1.x86_64.rpm nss-tools-3.19.1-3.el7_1.x86_64.rpm nss-util-3.19.1-1.el7_1.i686.rpm nss-util-3.19.1-1.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm nss-util-devel-3.19.1-1.el7_1.i686.rpm nss-util-devel-3.19.1-1.el7_1.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: nss-3.19.1-3.ael7b_1.src.rpm nss-util-3.19.1-1.ael7b_1.src.rpm ppc64le: nss-3.19.1-3.ael7b_1.ppc64le.rpm nss-debuginfo-3.19.1-3.ael7b_1.ppc64le.rpm nss-devel-3.19.1-3.ael7b_1.ppc64le.rpm nss-sysinit-3.19.1-3.ael7b_1.ppc64le.rpm nss-tools-3.19.1-3.ael7b_1.ppc64le.rpm nss-util-3.19.1-1.ael7b_1.ppc64le.rpm nss-util-debuginfo-3.19.1-1.ael7b_1.ppc64le.rpm nss-util-devel-3.19.1-1.ael7b_1.ppc64le.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: nss-debuginfo-3.19.1-3.el7_1.ppc.rpm nss-debuginfo-3.19.1-3.el7_1.ppc64.rpm nss-pkcs11-devel-3.19.1-3.el7_1.ppc.rpm nss-pkcs11-devel-3.19.1-3.el7_1.ppc64.rpm s390x: nss-debuginfo-3.19.1-3.el7_1.s390.rpm nss-debuginfo-3.19.1-3.el7_1.s390x.rpm nss-pkcs11-devel-3.19.1-3.el7_1.s390.rpm nss-pkcs11-devel-3.19.1-3.el7_1.s390x.rpm x86_64: nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el7_1.i686.rpm nss-pkcs11-devel-3.19.1-3.el7_1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64le: nss-debuginfo-3.19.1-3.ael7b_1.ppc64le.rpm nss-pkcs11-devel-3.19.1-3.ael7b_1.ppc64le.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: nss-3.19.1-3.el7_1.src.rpm nss-util-3.19.1-1.el7_1.src.rpm x86_64: nss-3.19.1-3.el7_1.i686.rpm nss-3.19.1-3.el7_1.x86_64.rpm nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-devel-3.19.1-3.el7_1.i686.rpm nss-devel-3.19.1-3.el7_1.x86_64.rpm nss-sysinit-3.19.1-3.el7_1.x86_64.rpm nss-tools-3.19.1-3.el7_1.x86_64.rpm nss-util-3.19.1-1.el7_1.i686.rpm nss-util-3.19.1-1.el7_1.x86_64.rpm nss-util-debuginfo-3.19.1-1.el7_1.i686.rpm nss-util-debuginfo-3.19.1-1.el7_1.x86_64.rpm nss-util-devel-3.19.1-1.el7_1.i686.rpm nss-util-devel-3.19.1-1.el7_1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: nss-debuginfo-3.19.1-3.el7_1.i686.rpm nss-debuginfo-3.19.1-3.el7_1.x86_64.rpm nss-pkcs11-devel-3.19.1-3.el7_1.i686.rpm nss-pkcs11-devel-3.19.1-3.el7_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-4000 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFVi60dXlSAg2UNWIIRAjqOAJ9fdQ42RbvWJ5RAAdEKHgCPYjidUQCePzlw +s/6Irm6/MeLWN04y51L8ww= =jxpf -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

remote

TYPE

encryption problem

PATCH

EXTERNAL IDS