![Joe Slater](/assets/img/avatar_default.png)
nss is vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. We update nss packages and nspr to the latest centos7 versions. *** Testing *** To be sure we will work with existing databases, before updating, create a database. $ mkdir arf $ echo "Pword22*" > arf/pass. $ certutil -N -d arf -f arf/pass $ certutil -G -d arf -f arf/pass # put a key pair in the database Save the arf directory. Install an iso with the updated nss packages. Import arf. Then... $ certutil -K -d arf -f arf/pass # display the keyID $ certutil -G -d arf -f arf/pass # add a key $ certutil -K -d arf -f arf/pass # display both keyID's *** Closes-bug: 1957929 Change-Id: I960e42d1e361dace4443d6a052fe06206c6675dd Signed-off-by: Joe Slater <joe.slater@windriver.com>
19 lines
686 B
Plaintext
19 lines
686 B
Plaintext
audit-libs-2.8.4-4.el7.x86_64.rpm
|
|
elfutils-0.176-2.el7.x86_64.rpm
|
|
elfutils-default-yama-scope-0.176-2.el7.noarch.rpm
|
|
elfutils-devel-0.176-2.el7.x86_64.rpm
|
|
elfutils-libelf-0.176-2.el7.x86_64.rpm
|
|
elfutils-libelf-devel-0.176-2.el7.x86_64.rpm
|
|
elfutils-libs-0.176-2.el7.x86_64.rpm
|
|
ima-evm-utils-1.1-2.el7.x86_64.rpm
|
|
libblkid-2.23.2-59.el7.x86_64.rpm
|
|
libcom_err-1.42.9-13.el7.x86_64.rpm
|
|
libsemanage-2.5-14.el7.x86_64.rpm
|
|
nss-softokn-3.67.0-3.el7_9.x86_64.rpm
|
|
nss-softokn-freebl-3.67.0-3.el7_9.x86_64.rpm
|
|
systemd-219-78.el7_9.3.x86_64.rpm
|
|
systemd-devel-219-78.el7_9.3.x86_64.rpm
|
|
systemd-libs-219-78.el7_9.3.x86_64.rpm
|
|
systemd-sysv-219-78.el7_9.3.x86_64.rpm
|
|
util-linux-2.23.2-59.el7.x86_64.rpm
|