Red Hat Security AdvisoryRHSA-2014:0916
nss and nspr security update
Released 2014-07-22 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) nspr-4.10.6-1.el5_10, nspr-4.10.6-1.el5_10.i386, nspr-4.10.6-1.el5_10.ia64 +21
- Red Hat Enterprise Linux Client (v. 7) nspr-4.10.6-1.el7_0, nss-3.15.4-7.el7_0, nss-sysinit-3.15.4-7.el7_0 +1
- Red Hat Enterprise Linux Client Optional (v. 7) nspr-devel-4.10.6-1.el7_0, nss-devel-3.15.4-7.el7_0, nss-pkcs11-devel-3.15.4-7.el7_0
- Red Hat Enterprise Linux ComputeNode (v. 7) nspr-4.10.6-1.el7_0, nss-3.15.4-7.el7_0, nss-sysinit-3.15.4-7.el7_0 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nspr-devel-4.10.6-1.el7_0, nss-devel-3.15.4-7.el7_0, nss-pkcs11-devel-3.15.4-7.el7_0
- Red Hat Enterprise Linux Desktop (v. 5 client) nspr-4.10.6-1.el5_10, nspr-4.10.6-1.el5_10.i386, nss-3.15.3-7.el5_10 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nspr-4.10.6-1.el5_10, nspr-devel-4.10.6-1.el5_10, nspr-devel-4.10.6-1.el5_10.i386 +5
- Red Hat Enterprise Linux Server (v. 7) nspr-4.10.6-1.el7_0, nspr-4.10.6-1.el7_0.ppc, nspr-devel-4.10.6-1.el7_0 +7
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.15.4-7.el7_0, nss-pkcs11-devel-3.15.4-7.el7_0.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nspr-4.10.6-1.el7_0, nspr-devel-4.10.6-1.el7_0, nss-3.15.4-7.el7_0 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.15.4-7.el7_0
Fixes 1 record
Priority MEDIUM 52
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06109 · Published 2014-07-23 · Fixed
