tools/centos-mirror-tools/config/centos/mock/rpms_centos3rdparties.lst
Joe Slater 4840fc1bda nss: fix CVE-2021-43527
nss is vulnerable to a heap overflow when handling DER-encoded
DSA or RSA-PSS signatures.  We update nss packages and nspr to
the latest centos7 versions.

*** Testing ***
To be sure we will work with existing databases, before updating,
create a database.

$ mkdir arf
$ echo "Pword22*" > arf/pass.
$ certutil -N -d arf -f arf/pass
$ certutil -G -d arf -f arf/pass   # put a key pair in the database

Save the arf directory.  Install an iso with the updated nss packages.
Import arf.  Then...

$ certutil -K -d arf -f arf/pass   # display the keyID
$ certutil -G -d arf -f arf/pass   # add a key
$ certutil -K -d arf -f arf/pass   # display both keyID's
***

Closes-bug: 1957929
Change-Id: I960e42d1e361dace4443d6a052fe06206c6675dd
Signed-off-by: Joe Slater <joe.slater@windriver.com>
2022-01-19 13:38:45 -05:00

19 lines
686 B
Plaintext

audit-libs-2.8.4-4.el7.x86_64.rpm
elfutils-0.176-2.el7.x86_64.rpm
elfutils-default-yama-scope-0.176-2.el7.noarch.rpm
elfutils-devel-0.176-2.el7.x86_64.rpm
elfutils-libelf-0.176-2.el7.x86_64.rpm
elfutils-libelf-devel-0.176-2.el7.x86_64.rpm
elfutils-libs-0.176-2.el7.x86_64.rpm
ima-evm-utils-1.1-2.el7.x86_64.rpm
libblkid-2.23.2-59.el7.x86_64.rpm
libcom_err-1.42.9-13.el7.x86_64.rpm
libsemanage-2.5-14.el7.x86_64.rpm
nss-softokn-3.67.0-3.el7_9.x86_64.rpm
nss-softokn-freebl-3.67.0-3.el7_9.x86_64.rpm
systemd-219-78.el7_9.3.x86_64.rpm
systemd-devel-219-78.el7_9.3.x86_64.rpm
systemd-libs-219-78.el7_9.3.x86_64.rpm
systemd-sysv-219-78.el7_9.3.x86_64.rpm
util-linux-2.23.2-59.el7.x86_64.rpm