Red Hat Security AdvisoryRHSA-2013:1144
nss, nss-util, nss-softokn, and nspr security update
Released 2013-08-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) nspr-4.9.5-2.el6_4, nss-3.14.3-4.el6_4, nss-softokn-3.14.3-3.el6_4 +4
- Red Hat Enterprise Linux Desktop Optional (v. 6) nspr-4.9.5-2.el6_4, nspr-devel-4.9.5-2.el6_4, nss-3.14.3-4.el6_4 +7
- Red Hat Enterprise Linux HPC Node (v. 6) nspr-4.9.5-2.el6_4, nss-3.14.3-4.el6_4, nss-softokn-3.14.3-3.el6_4 +4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nspr-4.9.5-2.el6_4, nspr-devel-4.9.5-2.el6_4, nss-3.14.3-4.el6_4 +7
- Red Hat Enterprise Linux Server (v. 6) nspr-4.9.5-2.el6_4, nspr-4.9.5-2.el6_4.ppc, nspr-devel-4.9.5-2.el6_4 +19
- Red Hat Enterprise Linux Server Optional (v. 6) nss-3.14.3-4.el6_4, nss-pkcs11-devel-3.14.3-4.el6_4, nss-pkcs11-devel-3.14.3-4.el6_4.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nspr-4.9.5-2.el6_4, nspr-devel-4.9.5-2.el6_4, nss-3.14.3-4.el6_4 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-3.14.3-4.el6_4, nss-pkcs11-devel-3.14.3-4.el6_4
Fixes 2 records
Priority LOW 31
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMo…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05213 · Published 2013-04-03 · Fixed CWE-119
Priority LOW 26
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03723 · Published 2013-02-08 · Fixed CWE-203
