Red Hat Security AdvisoryRHSA-2014:1073
nss, nss-util, nss-softokn security, bug fix, and enhancement update
Released 2014-08-18 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.16.2-2.el7_0, nss-softokn-3.16.2-1.el7_0, nss-softokn-freebl-3.16.2-1.el7_0 +3
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.16.2-2.el7_0, nss-pkcs11-devel-3.16.2-2.el7_0, nss-softokn-devel-3.16.2-1.el7_0 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.16.2-2.el7_0, nss-softokn-3.16.2-1.el7_0, nss-softokn-freebl-3.16.2-1.el7_0 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.16.2-2.el7_0, nss-pkcs11-devel-3.16.2-2.el7_0, nss-softokn-devel-3.16.2-1.el7_0 +2
- Red Hat Enterprise Linux Server (v. 7) nss-3.16.2-2.el7_0, nss-3.16.2-2.el7_0.ppc, nss-devel-3.16.2-2.el7_0 +15
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.16.2-2.el7_0, nss-pkcs11-devel-3.16.2-2.el7_0.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.16.2-2.el7_0, nss-devel-3.16.2-2.el7_0, nss-softokn-3.16.2-1.el7_0 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.16.2-2.el7_0
Fixes 1 record
Priority LOW 24
The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalize…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01753 · Published 2014-03-25 · Fixed CWE-20
