Issued:

2017-10-19

Updated:

2017-10-19

RHBA-2017:2942 - nss bug fix update

Synopsis

nss bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Updated nss packages that fix one bug are now available for Red Hat Enterprise Linux 7.

Description

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

This update fixes the following bug:

• In the nss-3.28.4-2.el7 update, the pk12util tool switched from UTF-16 to using the UTF-8 text encoding for passwords when the PKCS#5 PBES2 encryption scheme was used. While this matches the latest recommendation, it caused pk12util to fail when decrypting files encrypted with pk12util from an earlier NSS release. As a consequence, applications relying on PKCS#12 encryption, such as Identity Management (IdM), were not able to read data encrypted on an earlier Red Hat Enterprise Linux release. With this update, the pk12util tool uses the UTF-16 encoding if the password does not comply to UTF-8, and the described problem no longer occurs. (BZ#1493911)

Users of nss are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• nss-devel-3.28.4-15.el7_4.ppc64le.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.s390.rpm
• nss-3.28.4-15.el7_4.ppc64le.rpm
• nss-devel-3.28.4-15.el7_4.ppc64.rpm
• nss-tools-3.28.4-15.el7_4.x86_64.rpm
• nss-debuginfo-3.28.4-15.el7_4.s390.rpm
• nss-debuginfo-3.28.4-15.el7_4.i686.rpm
• nss-debuginfo-3.28.4-15.el7_4.ppc.rpm
• nss-debuginfo-3.28.4-15.el7_4.s390x.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.x86_64.rpm
• nss-sysinit-3.28.4-15.el7_4.aarch64.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.ppc64le.rpm
• nss-devel-3.28.4-15.el7_4.x86_64.rpm
• nss-devel-3.28.4-15.el7_4.s390.rpm
• nss-sysinit-3.28.4-15.el7_4.ppc64le.rpm
• nss-debuginfo-3.28.4-15.el7_4.x86_64.rpm
• nss-tools-3.28.4-15.el7_4.ppc64.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.aarch64.rpm
• nss-devel-3.28.4-15.el7_4.aarch64.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.i686.rpm
• nss-3.28.4-15.el7_4.ppc64.rpm
• nss-devel-3.28.4-15.el7_4.i686.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.ppc64.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.s390x.rpm
• nss-sysinit-3.28.4-15.el7_4.ppc64.rpm
• nss-sysinit-3.28.4-15.el7_4.s390x.rpm
• nss-devel-3.28.4-15.el7_4.s390x.rpm
• nss-debuginfo-3.28.4-15.el7_4.ppc64.rpm
• nss-sysinit-3.28.4-15.el7_4.x86_64.rpm
• nss-tools-3.28.4-15.el7_4.ppc64le.rpm
• nss-3.28.4-15.el7_4.i686.rpm
• nss-3.28.4-15.el7_4.ppc.rpm
• nss-3.28.4-15.el7_4.s390x.rpm
• nss-devel-3.28.4-15.el7_4.ppc.rpm
• nss-tools-3.28.4-15.el7_4.aarch64.rpm
• nss-debuginfo-3.28.4-15.el7_4.aarch64.rpm
• nss-3.28.4-15.el7_4.s390.rpm
• nss-pkcs11-devel-3.28.4-15.el7_4.ppc.rpm
• nss-debuginfo-3.28.4-15.el7_4.ppc64le.rpm
• nss-3.28.4-15.el7_4.aarch64.rpm
• nss-tools-3.28.4-15.el7_4.s390x.rpm
• nss-3.28.4-15.el7_4.src.rpm
• nss-3.28.4-15.el7_4.x86_64.rpm

Fixes

• This content is not included.BZ - 1493911

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.