Synopsis:    Important: nss and nspr security update
Issue Date:  2011-09-12


Network Security Services (NSS) is a set of libraries designed to 
support the cross-platform development of security-enabled client and 
server applications.

Netscape Portable Runtime (NSPR) provides platform independence for 
non-GUI operating system facilities.

It was found that a Certificate Authority (CA) issued fraudulent HTTPS
certificates. This update renders any HTTPS certificates signed by that 
CA as untrusted. This covers all uses of the certificates, including 
SSL, S/MIME, and code signing.
Note: This fix only applies to applications using the NSS Builtin Object
Token. It does not render the certificates untrusted for applications 
that use the NSS library, but do not use the NSS Builtin Object Token.

These updated packages upgrade NSS to version 3.12.10 on Scientific
Linux 4 and 5. As well, they upgrade NSPR to version 4.8.8 on Scientific 
Linux 4 and 5, as required by the NSS update. The packages for 
Scientific Linux 6 include a backported patch.

All NSS and NSPR users should upgrade to these updated packages, which
correct this issue. After installing the update, applications using NSS 
and NSPR must be restarted for the changes to take effect.

SL4:
   i386
      nspr-4.8.8-1.el4.i386.rpm
      nss-devel-3.12.10-4.el4.i386.rpm
      nss-3.12.10-4.el4.i386.rpm
      nss-debuginfo-3.12.10-4.el4.i386.rpm
      nspr-devel-4.8.8-1.el4.i386.rpm
      nspr-debuginfo-4.8.8-1.el4.i386.rpm
      nss-tools-3.12.10-4.el4.i386.rpm
   x86_64
      nss-devel-3.12.10-4.el4.x86_64.rpm
      nspr-4.8.8-1.el4.x86_64.rpm
      nspr-4.8.8-1.el4.i386.rpm
      nspr-debuginfo-4.8.8-1.el4.i386.rpm
      nspr-debuginfo-4.8.8-1.el4.x86_64.rpm
      nss-debuginfo-3.12.10-4.el4.x86_64.rpm
      nspr-devel-4.8.8-1.el4.x86_64.rpm
      nss-debuginfo-3.12.10-4.el4.i386.rpm
      nss-3.12.10-4.el4.i386.rpm
      nss-3.12.10-4.el4.x86_64.rpm
      nss-tools-3.12.10-4.el4.x86_64.rpm
SL5:
   i386
      nspr-devel-4.8.8-1.el5_7.i386.rpm
      nspr-debuginfo-4.8.8-1.el5_7.i386.rpm
      nss-debuginfo-3.12.10-4.el5_7.i386.rpm
      nss-devel-3.12.10-4.el5_7.i386.rpm
      nspr-4.8.8-1.el5_7.i386.rpm
      nss-tools-3.12.10-4.el5_7.i386.rpm
      nss-pkcs11-devel-3.12.10-4.el5_7.i386.rpm
      nss-3.12.10-4.el5_7.i386.rpm
   x86_64
      nss-3.12.10-4.el5_7.x86_64.rpm
      nss-debuginfo-3.12.10-4.el5_7.i386.rpm
      nss-tools-3.12.10-4.el5_7.x86_64.rpm
      nss-devel-3.12.10-4.el5_7.x86_64.rpm
      nss-debuginfo-3.12.10-4.el5_7.x86_64.rpm
      nss-pkcs11-devel-3.12.10-4.el5_7.i386.rpm
      nss-pkcs11-devel-3.12.10-4.el5_7.x86_64.rpm
      nss-devel-3.12.10-4.el5_7.i386.rpm
      nss-3.12.10-4.el5_7.i386.rpm
      nspr-devel-4.8.8-1.el5_7.x86_64.rpm
      nspr-4.8.8-1.el5_7.i386.rpm
      nspr-4.8.8-1.el5_7.x86_64.rpm
      nspr-debuginfo-4.8.8-1.el5_7.i386.rpm
      nspr-debuginfo-4.8.8-1.el5_7.x86_64.rpm
      nspr-devel-4.8.8-1.el5_7.i386.rpm
SL6:
   i386
      nss-debuginfo-3.12.9-12.el6_1.i686.rpm
      nss-3.12.9-12.el6_1.i686.rpm
      nss-devel-3.12.9-12.el6_1.i686.rpm
      nss-pkcs11-devel-3.12.9-12.el6_1.i686.rpm
      nss-sysinit-3.12.9-12.el6_1.i686.rpm
      nss-tools-3.12.9-12.el6_1.i686.rpm
      nss-softokn-3.12.9-3.el6.i686.rpm
      nss-softokn-devel-3.12.9-3.el6.i686.rpm
      nss-softokn-freebl-3.12.9-3.el6.i686.rpm
      nss-softokn-freebl-devel-3.12.9-3.el6.i686.rpm
      nss-util-3.12.9-1.el6.i686.rpm
      nss-util-devel-3.12.9-1.el6.i686.rpm
   x86_64
      nss-3.12.9-12.el6_1.i686.rpm
      nss-3.12.9-12.el6_1.x86_64.rpm
      nss-sysinit-3.12.9-12.el6_1.x86_64.rpm
      nss-pkcs11-devel-3.12.9-12.el6_1.x86_64.rpm
      nss-pkcs11-devel-3.12.9-12.el6_1.i686.rpm
      nss-debuginfo-3.12.9-12.el6_1.x86_64.rpm
      nss-debuginfo-3.12.9-12.el6_1.i686.rpm
      nss-devel-3.12.9-12.el6_1.x86_64.rpm
      nss-devel-3.12.9-12.el6_1.i686.rpm
      nss-tools-3.12.9-12.el6_1.x86_64.rpm
      nss-softokn-3.12.9-3.el6.i686.rpm
      nss-softokn-3.12.9-3.el6.x86_64.rpm
      nss-softokn-devel-3.12.9-3.el6.i686.rpm
      nss-softokn-devel-3.12.9-3.el6.x86_64.rpm
      nss-softokn-freebl-3.12.9-3.el6.i686.rpm
      nss-softokn-freebl-3.12.9-3.el6.x86_64.rpm
      nss-softokn-freebl-devel-3.12.9-3.el6.i686.rpm
      nss-softokn-freebl-devel-3.12.9-3.el6.x86_64.rpm
      nss-util-3.12.9-1.el6.i686.rpm
      nss-util-3.12.9-1.el6.x86_64.rpm
      nss-util-devel-3.12.9-1.el6.i686.rpm
      nss-util-devel-3.12.9-1.el6.x86_64.rpm


- Scientific Linux Development Team