Synopsis:          Moderate: nss security and bug fix update
Advisory ID:       SLSA-2021:1384-1
Issue Date:        2021-04-27
CVE Numbers:       CVE-2020-25648
--

Security Fix(es):

* nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE

Bug Fix(es):

* FTBFS: Paypal Cert expired

* FTBFS: IKE CLASS_1563 fails gtest

* Cannot compile code with nss headers and -Werror=strict-prototypes

* CA HSM ncipher token disabled after SL-7.9 update

---

SL7
 x86_64
 - nss-3.53.1-7.el7_9.i686.rpm
 - nss-3.53.1-7.el7_9.x86_64.rpm
 - nss-debuginfo-3.53.1-7.el7_9.i686.rpm
 - nss-debuginfo-3.53.1-7.el7_9.x86_64.rpm
 - nss-devel-3.53.1-7.el7_9.i686.rpm
 - nss-devel-3.53.1-7.el7_9.x86_64.rpm
 - nss-pkcs11-devel-3.53.1-7.el7_9.i686.rpm
 - nss-pkcs11-devel-3.53.1-7.el7_9.x86_64.rpm
 - nss-sysinit-3.53.1-7.el7_9.x86_64.rpm
 - nss-tools-3.53.1-7.el7_9.x86_64.rpm
--

- Scientific Linux Development Team