[ol8_appstream] nss-sysinit-3.53.1-17.el8_3.x86_64

Default Operating System module that manages applications loading
NSS globally on the system. This module loads the system defined
PKCS #11 modules for NSS and chains with other NSS modules to load
any system or user configured modules.

Changelog (Show File list) (Show related packages)

• Thu Dec 03 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-17

  - Fix various corner cases with ike v1 app b support.

• Thu Nov 19 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-16

  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.

• Wed Nov 04 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-15

  - Revert some policy changes the generate ABI runtime issues.

• Thu Oct 29 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-14

  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.

• Mon Oct 26 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-13

  - Add OAEP interface so applications can wrap keys with RSA-OAEP
    rather than RSA-PKCS-1.

• Mon Oct 19 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-12

  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests

• Thu Jul 30 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-11

  - Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)

• Thu Jul 30 2020 Bob Relyea <rrelyea@redhat.com> - 3.53.1-10

  - Disable dh timing test because it's unreliable on s390

• Thu Jul 30 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-9

  - Explicitly enable upgradedb/sharedb test cycles

• Wed Jul 29 2020 Daiki Ueno <dueno@redhat.com> - 3.53.1-8

  - Disable Delegated Credentials for TLS