--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-1eaaf1ed0f
2016-05-07 11:36:53.857675
--------------------------------------------------------------------------------

Name        : mod_nss
Product     : Fedora 24
Version     : 1.0.12
Release     : 4.fc24
URL         : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
Summary     : SSL/TLS module for the Apache HTTP server
Description :
The mod_nss module provides strong cryptography for the Apache Web
server via the Secure Sockets Layer (SSL) and Transport Layer
Security (TLS) protocols using the Network Security Services (NSS)
security library.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2016-3099
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1323914 - CVE-2016-3099 mod_nss: Invalid handling of +CIPHER operator [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1323914
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use
su -c 'yum update mod_nss' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/

Fedora 24: mod_nss Security Update

May 7, 2016
Security fix for CVE-2016-3099

Summary

The mod_nss module provides strong cryptography for the Apache Web

server via the Secure Sockets Layer (SSL) and Transport Layer

Security (TLS) protocols using the Network Security Services (NSS)

security library.

Update Information:

Security fix for CVE-2016-3099

Change Log

References

[ 1 ] Bug #1323914 - CVE-2016-3099 mod_nss: Invalid handling of +CIPHER operator [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1323914

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mod_nss' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : mod_nss
Product : Fedora 24
Version : 1.0.12
Release : 4.fc24
URL : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement
Summary : SSL/TLS module for the Apache HTTP server

Related News