Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-927-2: NSS regression

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-927-2: NSS regression
# 1  
Old 04-11-2010
USN-927-2: NSS regression
Description:
===========================================================Ubuntu Security Notice USN-927-2 April 11, 2010nss regressionhttps://launchpad.net/bugs/559881===========================================================A security issue affects the following Ubuntu releases:Ubuntu 9.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 9.10: libnss3-1d 3.12.6-0ubuntu0.9.10.2After a standard system upgrade you need to restart your session to effectthe necessary changes.Details follow:USN-927-1 fixed vulnerabilities in NSS. Upstream NSS 3.12.6 added anadditional checksum verification on libnssdbm3.so, but the Ubuntu packagingdid not create this checksum. As a result, Firefox could not initialize thesecurity component when the NSS Internal FIPS PKCS #11 Module was enabled.This update fixes the problem.We apologize for the inconvenience.Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds support for the new new renegotiation extension and will use it when the server supports it.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT CENTOS

secmod.db

SECMOD.DB(5)						     Network Security Services						      SECMOD.DB(5)

NAME

       secmod.db - Legacy NSS security modules database

DESCRIPTION

       secmod.db is an NSS security modules database.

       The security modules database is used to keep track of the NSS security modules. The NSS security modules export their services via the
       PKCS #11 API which NSS uses as its Services Provider Interface.

       The command line utility modutil is used for managing PKCS #11 module information both within secmod.db files and within hardware tokens.

       For new applications the recommended way of tracking security modules is via the pkcs11.txt configuration file used in conjunction the new
       sqlite-based shared database format for certificate and key databases.

FILES

       /etc/pki/nssdb/secmod.db

SEE ALSO

       modutil(1), cert8.db(5), cert9.db(5), key3.db(5), key4.db(5), pkcs11.txt(5)

AUTHORS

       The nss libraries were written and maintained by developers with Netscape, Red Hat, Sun, Oracle, Mozilla, and Google.

       Authors: Elio Maldonado <emaldona@redhat.com>.

LICENSE

       Licensed under the Mozilla Public License, v. 2.0. If a copy of the MPL was not distributed with this file, You can obtain one at
       http://mozilla.org/MPL/2.0/.

nss 3.15.4							   17 June 2014 						      SECMOD.DB(5)