Mehrere Probleme in nss-util
ID: | FEDORA-2011-17400 |
Distribution: | Fedora |
Plattformen: | Fedora 16 |
Datum: | Fr, 23. Dezember 2011, 16:36 |
Referenzen: | Keine Angabe |
Applikationen: | NSS |
Originalnachricht |
|
Name : nss-util Product : Fedora 16 Version : 3.13.1 Release : 3.fc16 URL : http://www.mozilla.org/projects/security/pki/nss/ Summary : Network Security Services Utilities Library Description : Utilities for Network Security Services and the Softoken module -------------------------------------------------------------------------------- Update Information: The latest version of Firefox and Thunderbird have the following changes: * Added Type Inference, significantly improving JavaScript performance * Added support for querying Do Not Track status via JavaScript * Added support for font-stretch * Improved support for text-overflow * Improved standards support for HTML5, MathML, and CSS * Fixed several stability issues * Fixed several security issues Update nss to 3.13.1 You can find the new features and bug fixes in NSS 3.13 and 3.13.1 with these Bugzilla queries: https://bugzilla.mozilla.org/buglist.cgi?list_id=1496878&resolution=FIXED&classification=Components&query_format=advanced&target_milestone=3.13&product=NSS and https://bugzilla.mozilla.org/buglist.cgi?list_id=1496878&resolution=FIXED&classification=Components&query_format=advanced&target_milestone=3.13.1&product=NSS Notable changes include: 1. SSL 2.0 is disabled by default. 2. A defense against the SSL 3.0 and TLS 1.0 CBC chosen plaintext attack demonstrated by Rizzo and Duong (CVE-2011-3389) is enabled by default. Set the SSL_CBC_RANDOM_IV SSL option to PR_FALSE to disable it. 3. SHA-224 is supported. 4. Added PORT_ErrorToString and PORT_ErrorToName to return the error message and symbolic name of an NSS error code. 5. Added NSS_GetVersion to return the NSS version string. 6. Added experimental support of RSA-PSS to the softoken only (contributed by Hanno Böck, http://rsapss.hboeck.de/). -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 2 2011 Elio Maldonado Batiz |