nss: fix CVE-2019-17006 - crypto primitives missing length checks

Update versions of nss, nss-utils, nss-tools, nss-sysinit,
nss-softokn, nss-softokn-freebl, and nspr.

All packages except the devel versions are on the default iso.

The structure of all lst files was preserved.

Closes-Bug: 1906471
Change-Id: I98f1cf059cb1f91c1836f0f62807ba345668450f
Signed-off-by: Joe Slater <joe.slater@windriver.com>

centos-mirror-tools/config/centos/compiler/rpms_centos.lst

@@ -178,15 +178,15 @@ ncurses-devel-5.9-14.20130511.el7_4.x86_64.rpm
 # ncurses-libs-5.9-14.20130511.el7_4.x86_64.rpm provided by mock
 neon-0.30.0-3.el7.x86_64.rpm
 nettle-2.7.1-8.el7.x86_64.rpm
-# nspr-4.19.0-1.el7_5.x86_64.rpm provided by mock
-nspr-devel-4.19.0-1.el7_5.x86_64.rpm
-# nss-3.36.0-7.el7_5.x86_64.rpm provided by mock
-nss-devel-3.36.0-7.el7_5.x86_64.rpm
+# nspr-4.25.0-2.el7_9.x86_64.rpm provided by mock
+nspr-devel-4.25.0-2.el7_9.x86_64.rpm
+# nss-3.53.1-3.el7_9.x86_64.rpm provided by mock
+nss-devel-3.53.1-3.el7_9.x86_64.rpm
 # nss-pem-1.0.3-5.el7.x86_64.rpm provided by mock
-# nss-sysinit-3.36.0-7.el7_5.x86_64.rpm provided by mock
-# nss-tools-3.36.0-7.el7_5.x86_64.rpm provided by mock
-# nss-util-3.36.0-1.el7_5.x86_64.rpm provided by mock
-nss-util-devel-3.36.0-1.el7_5.x86_64.rpm
+# nss-sysinit-3.53.1-3.el7_9.x86_64.rpm provided by mock
+# nss-tools-3.53.1-3.el7_9.x86_64.rpm provided by mock
+# nss-util-3.53.1-1.el7_9.x86_64.rpm provided by mock
+nss-util-devel-3.53.1-1.el7_9.x86_64.rpm
 openssh-7.4p1-16.el7.x86_64.rpm
 openssh-clients-7.4p1-16.el7.x86_64.rpm
 openssl-devel-1.0.2k-16.el7.x86_64.rpm

centos-mirror-tools/config/centos/compiler/rpms_centos3rdparties.lst

@@ -22,10 +22,10 @@ mesa-libgbm-18.0.5-3.el7.x86_64.rpm
 mesa-libGL-18.0.5-3.el7.x86_64.rpm
 mesa-libglapi-18.0.5-3.el7.x86_64.rpm
 mesa-libGL-devel-18.0.5-3.el7.x86_64.rpm
-# nss-softokn-3.36.0-5.el7_5.x86_64.rpm provided by mock
-nss-softokn-devel-3.36.0-5.el7_5.x86_64.rpm
-# nss-softokn-freebl-3.36.0-5.el7_5.x86_64.rpm provided by mock
-nss-softokn-freebl-devel-3.36.0-5.el7_5.x86_64.rpm
+# nss-softokn-3.53.1-6.el7_9.x86_64.rpm provided by mock
+nss-softokn-devel-3.53.1-6.el7_9.x86_64.rpm
+# nss-softokn-freebl-3.53.1-6.el7_9.x86_64.rpm provided by mock
+nss-softokn-freebl-devel-3.53.1-6.el7_9.x86_64.rpm
 # openldap-2.4.44-20.el7.x86_64.rpm provided by mock
 # systemd-219-67.el7.x86_64.rpm provided by mock
 # systemd-devel-219-67.el7.x86_64.rpm provided by mock

centos-mirror-tools/config/centos/distro/rpms_centos.lst

@@ -553,15 +553,15 @@ newt-0.52.15-4.el7.x86_64.rpm
 newt-devel-0.52.15-4.el7.x86_64.rpm
 nfs-utils-1.3.0-0.61.el7.x86_64.rpm
 nmap-ncat-6.40-16.el7.x86_64.rpm
-# nspr-4.19.0-1.el7_5.x86_64.rpm provided by mock
-nspr-devel-4.19.0-1.el7_5.x86_64.rpm
-# nss-3.36.0-7.el7_5.x86_64.rpm provided by mock
-nss-devel-3.36.0-7.el7_5.x86_64.rpm
+# nspr-4.25.0-2.el7_9.x86_64.rpm provided by mock
+nspr-devel-4.25.0-2.el7_9.x86_64.rpm
+# nss-3.53.1-3.el7_9.x86_64.rpm provided by mock
+nss-devel-3.53.1-3.el7_9.x86_64.rpm
 # nss-pem-1.0.3-5.el7.x86_64.rpm provided by mock
-# nss-sysinit-3.36.0-7.el7_5.x86_64.rpm provided by mock
-# nss-tools-3.36.0-7.el7_5.x86_64.rpm provided by mock
-# nss-util-3.36.0-1.el7_5.x86_64.rpm provided by mock
-nss-util-devel-3.36.0-1.el7_5.x86_64.rpm
+# nss-sysinit-3.53.1-3.el7_9.x86_64.rpm provided by mock
+# nss-tools-3.53.1-3.el7_9.x86_64.rpm provided by mock
+# nss-util-3.53.1-1.el7_9.x86_64.rpm provided by mock
+nss-util-devel-3.53.1-1.el7_9.x86_64.rpm
 numactl-devel-2.0.9-7.el7.x86_64.rpm
 numactl-libs-2.0.9-7.el7.x86_64.rpm
 nvme-cli-1.8.1-3.el7.x86_64.rpm

centos-mirror-tools/config/centos/distro/rpms_centos3rdparties.lst

@@ -50,10 +50,10 @@ mesa-libglapi-18.0.5-3.el7.x86_64.rpm
 mesa-libGL-devel-18.0.5-3.el7.x86_64.rpm
 NetworkManager-glib-1.12.0-8.el7_6.x86_64.rpm
 NetworkManager-glib-devel-1.12.0-8.el7_6.x86_64.rpm
-# nss-softokn-3.36.0-5.el7_5.x86_64.rpm provided by mock
-nss-softokn-devel-3.36.0-5.el7_5.x86_64.rpm
-# nss-softokn-freebl-3.36.0-5.el7_5.x86_64.rpm provided by mock
-nss-softokn-freebl-devel-3.36.0-5.el7_5.x86_64.rpm
+# nss-softokn-3.53.1-6.el7_9.x86_64.rpm provided by mock
+nss-softokn-devel-3.53.1-6.el7_9.x86_64.rpm
+# nss-softokn-freebl-3.53.1-6.el7_9.x86_64.rpm provided by mock
+nss-softokn-freebl-devel-3.53.1-6.el7_9.x86_64.rpm
 # openldap-2.4.44-20.el7.x86_64.rpm provided by mock
 policycoreutils-2.5-29.el7.x86_64.rpm
 policycoreutils-devel-2.5-29.el7.x86_64.rpm

centos-mirror-tools/config/centos/flock/rpms_centos.lst

@@ -594,15 +594,15 @@ ndctl-libs-65-5.el7.x86_64.rpm
 nfs-utils-1.3.0-0.61.el7.x86_64.rpm
 nmap-ncat-6.40-16.el7.x86_64.rpm
 nscd-2.17-260.el7.x86_64.rpm
-# nspr-4.19.0-1.el7_5.x86_64.rpm provided by mock
-# nss-3.36.0-7.el7_5.x86_64.rpm provided by mock
+# nspr-4.25.0-2.el7_9.x86_64.rpm provided by mock
+# nss-3.53.1-3.el7_9.x86_64.rpm provided by mock
 nss_compat_ossl-0.9.6-8.el7.x86_64.rpm
 nss-pam-ldapd-0.8.13-16.el7.x86_64.rpm
 # nss-pem-1.0.3-5.el7.x86_64.rpm provided by mock
-# nss-sysinit-3.36.0-7.el7_5.x86_64.rpm provided by mock
-# nss-tools-3.36.0-7.el7_5.x86_64.rpm provided by mock
-# nss-util-3.36.0-1.el7_5.x86_64.rpm provided by mock
-nss-util-devel-3.36.0-1.el7_5.x86_64.rpm
+# nss-sysinit-3.53.1-3.el7_9.x86_64.rpm provided by mock
+# nss-tools-3.53.1-3.el7_9.x86_64.rpm provided by mock
+# nss-util-3.53.1-1.el7_9.x86_64.rpm provided by mock
+nss-util-devel-3.53.1-1.el7_9.x86_64.rpm
 numactl-devel-2.0.9-7.el7.x86_64.rpm
 numactl-libs-2.0.9-7.el7.x86_64.rpm
 nvme-cli-1.8.1-3.el7.x86_64.rpm

centos-mirror-tools/config/centos/flock/rpms_centos3rdparties.lst

@@ -44,10 +44,10 @@ libtevent-0.9.39-1.el7.x86_64.rpm
 libwbclient-4.10.16-5.el7.x86_64.rpm
 lvm2-2.02.177-4.el7.x86_64.rpm
 lvm2-libs-2.02.177-4.el7.x86_64.rpm
-# nss-softokn-3.36.0-5.el7_5.x86_64.rpm provided by mock
-nss-softokn-devel-3.36.0-5.el7_5.x86_64.rpm
-# nss-softokn-freebl-3.36.0-5.el7_5.x86_64.rpm provided by mock
-nss-softokn-freebl-devel-3.36.0-5.el7_5.x86_64.rpm
+# nss-softokn-3.53.1-6.el7_9.x86_64.rpm provided by mock
+nss-softokn-devel-3.53.1-6.el7_9.x86_64.rpm
+# nss-softokn-freebl-3.53.1-6.el7_9.x86_64.rpm provided by mock
+nss-softokn-freebl-devel-3.53.1-6.el7_9.x86_64.rpm
 ntfs-3g-2017.3.23-11.el7.x86_64.rpm
 ntfs-3g-devel-2017.3.23-11.el7.x86_64.rpm
 ntfsprogs-2017.3.23-11.el7.x86_64.rpm

centos-mirror-tools/config/centos/mock/rpms_centos.lst

@@ -95,12 +95,12 @@ mpfr-3.1.1-4.el7.x86_64.rpm
 ncurses-5.9-14.20130511.el7_4.x86_64.rpm
 ncurses-base-5.9-14.20130511.el7_4.noarch.rpm
 ncurses-libs-5.9-14.20130511.el7_4.x86_64.rpm
-nspr-4.19.0-1.el7_5.x86_64.rpm
-nss-3.36.0-7.el7_5.x86_64.rpm
+nspr-4.25.0-2.el7_9.x86_64.rpm
+nss-3.53.1-3.el7_9.x86_64.rpm
 nss-pem-1.0.3-5.el7.x86_64.rpm
-nss-sysinit-3.36.0-7.el7_5.x86_64.rpm
-nss-tools-3.36.0-7.el7_5.x86_64.rpm
-nss-util-3.36.0-1.el7_5.x86_64.rpm
+nss-sysinit-3.53.1-3.el7_9.x86_64.rpm
+nss-tools-3.53.1-3.el7_9.x86_64.rpm
+nss-util-3.53.1-1.el7_9.x86_64.rpm
 openldap-2.4.44-20.el7.x86_64.rpm
 openssl-libs-1.0.2k-16.el7.x86_64.rpm
 p11-kit-0.23.5-3.el7.x86_64.rpm

centos-mirror-tools/config/centos/mock/rpms_centos3rdparties.lst

@@ -9,8 +9,8 @@ ima-evm-utils-1.1-2.el7.x86_64.rpm
 libblkid-2.23.2-59.el7.x86_64.rpm
 libcom_err-1.42.9-13.el7.x86_64.rpm
 libsemanage-2.5-14.el7.x86_64.rpm
-nss-softokn-3.36.0-5.el7_5.x86_64.rpm
-nss-softokn-freebl-3.36.0-5.el7_5.x86_64.rpm
+nss-softokn-3.53.1-6.el7_9.x86_64.rpm
+nss-softokn-freebl-3.53.1-6.el7_9.x86_64.rpm
 systemd-219-67.el7.x86_64.rpm
 systemd-devel-219-67.el7.x86_64.rpm
 systemd-libs-219-67.el7.x86_64.rpm