_______________________________________________________________________

Mandriva Linux Advisory MDVA-2010:100
http://www.mandriva.com/security/
_______________________________________________________________________

Package : rootcerts
Date : March 12, 2010
Affected: 2008.0, 2009.0, 2009.1, 2010.0, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

The Adobe Flash plugin has https support, but only searches for SSL certificates in /etc/ssl/certs. This advisory provides a compatibility symlink at /etc/ssl/certs pointing to /etc/pki/tls/certs to remedy this problem.

Additionally this advisory also brings the latest root CA certs from the mozilla cvs dated 2010-02-16. The mozilla nss library has consequently been rebuilt to pickup these changes and are also being provided.

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.
_______________________________________________________________________

References:

https://qa.mandriva.com/58107
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2008.0:
7b0a8be3bd66bddd73705f8235899a85 2008.0/i586/libnss3-3.12.3.1-0.4mdv2008.0.i586.rpm
ef442de0e6456d44cf28bdc1bcc12137 2008.0/i586/libnss-devel-3.12.3.1-0.4mdv2008.0.i586.rpm
d35721988b597aab63bba4a802cc443b 2008.0/i586/libnss-static-devel-3.12.3.1-0.4mdv2008.0.i586.rpm
a0f7ab2b865aa482f2b2f84c5fe03d62 2008.0/i586/nss-3.12.3.1-0.4mdv2008.0.i586.rpm
b601e0a5832de182b4fb1149afc4e8fa 2008.0/i586/rootcerts-20100216.01-1mdv2008.0.i586.rpm
b00211c58a669ec1c192ccafdbd0987a 2008.0/SRPMS/nss-3.12.3.1-0.4mdv2008.0.src.rpm
4e39992de798a8383e23a9ca8ad0d97f 2008.0/SRPMS/rootcerts-20100216.01-1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
4bebfb8ba0cc0e60c1fbb1d5c8465829 2008.0/x86_64/lib64nss3-3.12.3.1-0.4mdv2008.0.x86_64.rpm
aef7ff027c87559c0db7d7dd4cffb506 2008.0/x86_64/lib64nss-devel-3.12.3.1-0.4mdv2008.0.x86_64.rpm
aff3f6b153a1e4ed582711496cc9b52b 2008.0/x86_64/lib64nss-static-devel-3.12.3.1-0.4mdv2008.0.x86_64.rpm
03a8acbba1d0e7bae988d986b0ec9c19 2008.0/x86_64/nss-3.12.3.1-0.4mdv2008.0.x86_64.rpm
386644e6098cc920e148dc1f8a454fc8 2008.0/x86_64/rootcerts-20100216.01-1mdv2008.0.x86_64.rpm
b00211c58a669ec1c192ccafdbd0987a 2008.0/SRPMS/nss-3.12.3.1-0.4mdv2008.0.src.rpm
4e39992de798a8383e23a9ca8ad0d97f 2008.0/SRPMS/rootcerts-20100216.01-1mdv2008.0.src.rpm

Mandriva Linux 2009.0:
7ed20f4aa613f275ad6d022d49ee9dc5 2009.0/i586/libnss3-3.12.3.1-0.4mdv2009.0.i586.rpm
0200b5275de2e218c33cf9dd5a2569e4 2009.0/i586/libnss-devel-3.12.3.1-0.4mdv2009.0.i586.rpm
570e30aa53b84c791f623b93b8f4dfd3 2009.0/i586/libnss-static-devel-3.12.3.1-0.4mdv2009.0.i586.rpm
f947cd54c12d81235d6081c97453af14 2009.0/i586/nss-3.12.3.1-0.4mdv2009.0.i586.rpm
909614e62fa1ef827d5c6ae7dfb9d922 2009.0/i586/rootcerts-20100216.01-1mdv2009.0.i586.rpm
f06235998315b215d2fadeab12775793 2009.0/i586/rootcerts-java-20100216.01-1mdv2009.0.i586.rpm
798010814fdf1f504e3ae4c6a02a4254 2009.0/SRPMS/nss-3.12.3.1-0.4mdv2009.0.src.rpm
c5429dc35ce72283143db4b349664b79 2009.0/SRPMS/rootcerts-20100216.01-1mdv2009.0.src.rpm

Mandriva Linux 2009.0/X86_64:
251b67b4939ce22b1a37d28f86fad626 2009.0/x86_64/lib64nss3-3.12.3.1-0.4mdv2009.0.x86_64.rpm
d5f511a4d463297a1ed2579b5f998079 2009.0/x86_64/lib64nss-devel-3.12.3.1-0.4mdv2009.0.x86_64.rpm
24aca2a606c81e0b03ccd0e1d7f9ff16 2009.0/x86_64/lib64nss-static-devel-3.12.3.1-0.4mdv2009.0.x86_64.rpm
26c1ab5fd9c1c7f9a16fe464e05a5bae 2009.0/x86_64/nss-3.12.3.1-0.4mdv2009.0.x86_64.rpm
ec52eabefe0a7b844235cbe3c2e48c95 2009.0/x86_64/rootcerts-20100216.01-1mdv2009.0.x86_64.rpm
74ace58f84fff45ab21a225b45d98e50 2009.0/x86_64/rootcerts-java-20100216.01-1mdv2009.0.x86_64.rpm
798010814fdf1f504e3ae4c6a02a4254 2009.0/SRPMS/nss-3.12.3.1-0.4mdv2009.0.src.rpm
c5429dc35ce72283143db4b349664b79 2009.0/SRPMS/rootcerts-20100216.01-1mdv2009.0.src.rpm

Mandriva Linux 2009.1:
628c2549a2a546f6fe4d337b8c23d614 2009.1/i586/libnss3-3.12.3.1-0.4mdv2009.1.i586.rpm
8bec2fd3c5e88c074c502e85caefed92 2009.1/i586/libnss-devel-3.12.3.1-0.4mdv2009.1.i586.rpm
b1359a008a7034227d3d3c51d4404375 2009.1/i586/libnss-static-devel-3.12.3.1-0.4mdv2009.1.i586.rpm
f1887d35b3e67d8a311e5fd44422fdf5 2009.1/i586/nss-3.12.3.1-0.4mdv2009.1.i586.rpm
1c31216ab75046bbf94c9740e984b9d1 2009.1/i586/rootcerts-20100216.01-1mdv2009.1.i586.rpm
6337750e3ca0ad50348a34fafd9b83cc 2009.1/i586/rootcerts-java-20100216.01-1mdv2009.1.i586.rpm
6461e2a4c00838948e0fd6ed9ddc644a 2009.1/SRPMS/nss-3.12.3.1-0.4mdv2009.1.src.rpm
5dd2f35bef9712f96e5078fac6811bd2 2009.1/SRPMS/rootcerts-20100216.01-1mdv2009.1.src.rpm

Mandriva Linux 2009.1/X86_64:
4729ca69de70a88c5933eb27a92f2bf0 2009.1/x86_64/lib64nss3-3.12.3.1-0.4mdv2009.1.x86_64.rpm
c7c6c495888f1d047f75c2f7f56903fe 2009.1/x86_64/lib64nss-devel-3.12.3.1-0.4mdv2009.1.x86_64.rpm
d9990b84fd7bdb8a11ce6577ba294a2d 2009.1/x86_64/lib64nss-static-devel-3.12.3.1-0.4mdv2009.1.x86_64.rpm
903640c2c5d4cdd598ddceeef5cd24fe 2009.1/x86_64/nss-3.12.3.1-0.4mdv2009.1.x86_64.rpm
280e2e0b8a12713502d577f95e80221b 2009.1/x86_64/rootcerts-20100216.01-1mdv2009.1.x86_64.rpm
ce581302176aba2d30ce947108f6573b 2009.1/x86_64/rootcerts-java-20100216.01-1mdv2009.1.x86_64.rpm
6461e2a4c00838948e0fd6ed9ddc644a 2009.1/SRPMS/nss-3.12.3.1-0.4mdv2009.1.src.rpm
5dd2f35bef9712f96e5078fac6811bd2 2009.1/SRPMS/rootcerts-20100216.01-1mdv2009.1.src.rpm

Mandriva Linux 2010.0:
0c7d86212c66504043f0c26afac0e801 2010.0/i586/libnss3-3.12.4-2.3mdv2010.0.i586.rpm
fdc0c926c11ac562589e5f54ce6ef6f7 2010.0/i586/libnss-devel-3.12.4-2.3mdv2010.0.i586.rpm
4a84f0172a584ab2aec2625cc4012cd0 2010.0/i586/libnss-static-devel-3.12.4-2.3mdv2010.0.i586.rpm
befaca64020f2c1e1ef8a3a10c61679b 2010.0/i586/nss-3.12.4-2.3mdv2010.0.i586.rpm
a8abaf5e1d286d4cb46c16c8783312db 2010.0/i586/rootcerts-20100216.01-1mdv2010.0.i586.rpm
960c8852466a6453944fe6f80bd6b2b4 2010.0/i586/rootcerts-java-20100216.01-1mdv2010.0.i586.rpm
5fd5e464f73365f88a5cae702bb8f314 2010.0/SRPMS/nss-3.12.4-2.3mdv2010.0.src.rpm
be1b4405a7d78162298ab240023e62a7 2010.0/SRPMS/rootcerts-20100216.01-1mdv2010.0.src.rpm

Mandriva Linux 2010.0/X86_64:
f84a1f7f71efb69b09fbbcdacfd18e67 2010.0/x86_64/lib64nss3-3.12.4-2.3mdv2010.0.x86_64.rpm
980403bd80ea57deff72fc4ca106645f 2010.0/x86_64/lib64nss-devel-3.12.4-2.3mdv2010.0.x86_64.rpm
b56c53c6eb6fa5dbfb2d183bedc8379f 2010.0/x86_64/lib64nss-static-devel-3.12.4-2.3mdv2010.0.x86_64.rpm
d5899d331327969c4063004c78815e26 2010.0/x86_64/nss-3.12.4-2.3mdv2010.0.x86_64.rpm
542cef1503e207bc5207f9c50cbddac3 2010.0/x86_64/rootcerts-20100216.01-1mdv2010.0.x86_64.rpm
2e21f0cbb5f273b483fe7fdff0d557ee 2010.0/x86_64/rootcerts-java-20100216.01-1mdv2010.0.x86_64.rpm
5fd5e464f73365f88a5cae702bb8f314 2010.0/SRPMS/nss-3.12.4-2.3mdv2010.0.src.rpm
be1b4405a7d78162298ab240023e62a7 2010.0/SRPMS/rootcerts-20100216.01-1mdv2010.0.src.rpm

Mandriva Enterprise Server 5:
871047419d2ddb4797b8a5871aa6a7ab mes5/i586/libnss3-3.12.3.1-0.4mdvmes5.i586.rpm
a5a188d93fc57148718d21c9a7b2e81c mes5/i586/libnss-devel-3.12.3.1-0.4mdvmes5.i586.rpm
b6e4d40deca52b22fbbb634c83329454 mes5/i586/libnss-static-devel-3.12.3.1-0.4mdvmes5.i586.rpm
79fef5de3df5b6e92e7afee781f76dd2 mes5/i586/nss-3.12.3.1-0.4mdvmes5.i586.rpm
f131faf7af2525a53206d3b735bcb948 mes5/i586/rootcerts-20100216.01-1mdvmes5.i586.rpm
7b8f225918b74944f4ca2ba2b411acfd mes5/i586/rootcerts-java-20100216.01-1mdvmes5.i586.rpm
e44527827fb3a01bcfa5e476714a106b mes5/SRPMS/nss-3.12.3.1-0.4mdvmes5.src.rpm
57b0f8dabf9aadd08225695dd0f804a6 mes5/SRPMS/rootcerts-20100216.01-1mdvmes5.src.rpm

Mandriva Enterprise Server 5/X86_64:
3194b9c381403f41d63021b24e309fbb mes5/x86_64/lib64nss3-3.12.3.1-0.4mdvmes5.x86_64.rpm
405fc4b6298cfc83f7787c1269f3348d mes5/x86_64/lib64nss-devel-3.12.3.1-0.4mdvmes5.x86_64.rpm
867c08a3f99552a617fe9000af51f70c mes5/x86_64/lib64nss-static-devel-3.12.3.1-0.4mdvmes5.x86_64.rpm
da6f7f14a675e7aebb65c12ea8dcde67 mes5/x86_64/nss-3.12.3.1-0.4mdvmes5.x86_64.rpm
a88b4bc4cc08382d6e0e285b06bfc18d mes5/x86_64/rootcerts-20100216.01-1mdvmes5.x86_64.rpm
11d7323dc5f5e4d6a2854605029b9296 mes5/x86_64/rootcerts-java-20100216.01-1mdvmes5.x86_64.rpm
e44527827fb3a01bcfa5e476714a106b mes5/SRPMS/nss-3.12.3.1-0.4mdvmes5.src.rpm
57b0f8dabf9aadd08225695dd0f804a6 mes5/SRPMS/rootcerts-20100216.01-1mdvmes5.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________