You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa mod_nss

Sigurnosni nedostatak programskog paketa mod_nss

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-c76c1c84cf
2016-01-08 18:07:50.302342
——————————————————————————–

Name : mod_nss
Product : Fedora 23
Version : 1.0.12
Release : 1.fc23
URL : https://fedorahosted.org/mod_nss/
Summary : SSL/TLS module for the Apache HTTP server
Description :
The mod_nss module provides strong cryptography for the Apache Web
server via the Secure Sockets Layer (SSL) and Transport Layer
Security (TLS) protocols using the Network Security Services (NSS)
security library.

——————————————————————————–
Update Information:

Update to upstream 1.0.12 * Fixes CVE-2015-5244 * Add support for SNI * Add
RenegBufferSize option * Add support for TLS Session Tickets (RFC 5077) For
full list of changes see https://fedorahosted.org/mod_nss/wiki/Releases
mod_nss-1.0.12-1.fc23 – Update to upstream 1.0.12
——————————————————————————–
References:

[ 1 ] Bug #1259216 – CVE-2015-5244 mod_nss: incorrect ciphersuite parsing
https://bugzilla.redhat.com/show_bug.cgi?id=1259216
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update mod_nss’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2016-01-0006-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa prosody

Otkriveni su sigurnosni nedostaci u programskom paketu prosody. Otkriveni nedostaci potencijalnim napadačima omogućuju pristup osjetljivim informacijama i pogađanje tajnog ključa...

Close