Red Hat Security Advisory

RHSA-2013:1840

nss security update

Released 2013-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Compute Node EUS (v. 6.2) nss-3.13.1-9.el6_2, nss-sysinit-3.13.1-9.el6_2, nss-tools-3.13.1-9.el6_2
Red Hat Enterprise Linux Compute Node EUS (v. 6.3) nss-3.13.6-3.el6_3, nss-sysinit-3.13.6-3.el6_3, nss-tools-3.13.6-3.el6_3
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.2) nss-3.13.1-9.el6_2, nss-devel-3.13.1-9.el6_2, nss-pkcs11-devel-3.13.1-9.el6_2
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.3) nss-3.13.6-3.el6_3, nss-devel-3.13.6-3.el6_3, nss-pkcs11-devel-3.13.6-3.el6_3
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) nss-3.14.3-5.el6_4, nss-devel-3.14.3-5.el6_4, nss-pkcs11-devel-3.14.3-5.el6_4
Red Hat Enterprise Linux HPC Node EUS (v. 6.4) nss-3.14.3-5.el6_4, nss-sysinit-3.14.3-5.el6_4, nss-tools-3.14.3-5.el6_4
Red Hat Enterprise Linux Server EUS (v. 6.2) nss-3.13.1-9.el6_2, nss-3.13.1-9.el6_2.ppc, nss-devel-3.13.1-9.el6_2 +3
Red Hat Enterprise Linux Server EUS (v. 6.3) nss-3.13.6-3.el6_3, nss-3.13.6-3.el6_3.ppc, nss-devel-3.13.6-3.el6_3 +3
Red Hat Enterprise Linux Server EUS (v. 6.4) nss-3.14.3-5.el6_4, nss-3.14.3-5.el6_4.ppc, nss-devel-3.14.3-5.el6_4 +3
Red Hat Enterprise Linux Server Optional EUS (v. 6.2) nss-3.13.1-9.el6_2, nss-pkcs11-devel-3.13.1-9.el6_2, nss-pkcs11-devel-3.13.1-9.el6_2.ppc
Red Hat Enterprise Linux Server Optional EUS (v. 6.3) nss-3.13.6-3.el6_3, nss-pkcs11-devel-3.13.6-3.el6_3, nss-pkcs11-devel-3.13.6-3.el6_3.ppc
Red Hat Enterprise Linux Server Optional EUS (v. 6.4) nss-3.14.3-5.el6_4, nss-pkcs11-devel-3.14.3-5.el6_4, nss-pkcs11-devel-3.14.3-5.el6_4.ppc

Fixes 1 record

TI-2013-04791 CVE-2013-5605 · GHSA-mv87-4w29-5g7x

Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows…

MEDIUM 40

Mozilla Network Security Services (NSS) 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04435 Published 2013-11-16 Fixed CWE-20