perfSONAR User Q&A and Other Discussion

[Daniel Doyle <>]

Hello all,

Red Hat has released a new CVE this week.

https://rhn.redhat.com/errata/RHSA-2016-0370.html

While we do not believe that anything in perfSONAR is explicitly making use of this library, the “nss-util” package is included by default on CentOS installations. It is possible that software somewhere along the entire operating system stack is making use of it or could make use of it in the future. As such, to be safe we recommend upgrading to the latest version of the “nss-util” library posted in the CVE.

Machines with auto updates enabled should have already installed this update, but you should consider rebooting the machines to ensure any processes making use of it have the patches applied. Any servers without auto updates should be upgraded with “yum upgrade nss-util”.

Thank you,

The perfSONAR Team