Red Hat Security AdvisoryRHSA-2015:1981
nss, nss-util, and nspr security update
Released 2015-11-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nspr-4.10.8-2.el7_1, nss-3.19.1-7.el7_1.2, nss-sysinit-3.19.1-7.el7_1.2 +2
- Red Hat Enterprise Linux Client Optional (v. 7) nspr-devel-4.10.8-2.el7_1, nss-devel-3.19.1-7.el7_1.2, nss-pkcs11-devel-3.19.1-7.el7_1.2 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) nspr-4.10.8-2.el7_1, nss-3.19.1-7.el7_1.2, nss-sysinit-3.19.1-7.el7_1.2 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nspr-devel-4.10.8-2.el7_1, nss-devel-3.19.1-7.el7_1.2, nss-pkcs11-devel-3.19.1-7.el7_1.2 +1
- Red Hat Enterprise Linux Desktop (v. 6) nspr-4.10.8-2.el6_7, nss-3.19.1-5.el6_7, nss-sysinit-3.19.1-5.el6_7 +2
- Red Hat Enterprise Linux Desktop Optional (v. 6) nspr-devel-4.10.8-2.el6_7, nss-devel-3.19.1-5.el6_7, nss-pkcs11-devel-3.19.1-5.el6_7 +1
- Red Hat Enterprise Linux HPC Node (v. 6) nspr-4.10.8-2.el6_7, nss-3.19.1-5.el6_7, nss-sysinit-3.19.1-5.el6_7 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nspr-devel-4.10.8-2.el6_7, nss-devel-3.19.1-5.el6_7, nss-pkcs11-devel-3.19.1-5.el6_7 +1
- Red Hat Enterprise Linux Server (v. 6) nspr-4.10.8-2.el6_7, nspr-4.10.8-2.el6_7.ppc, nspr-devel-4.10.8-2.el6_7 +11
- Red Hat Enterprise Linux Server (v. 7) nspr-4.10.8-2.ael7b_1, nspr-4.10.8-2.el7_1, nspr-4.10.8-2.el7_1.ppc +19
- Red Hat Enterprise Linux Server Optional (v. 6) nss-pkcs11-devel-3.19.1-5.el6_7, nss-pkcs11-devel-3.19.1-5.el6_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.19.1-7.ael7b_1.2, nss-pkcs11-devel-3.19.1-7.el7_1.2, nss-pkcs11-devel-3.19.1-7.el7_1.2.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nspr-4.10.8-2.el6_7, nspr-devel-4.10.8-2.el6_7, nss-3.19.1-5.el6_7 +5
- Red Hat Enterprise Linux Workstation (v. 7) nspr-4.10.8-2.el7_1, nspr-devel-4.10.8-2.el7_1, nss-3.19.1-7.el7_1.2 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-pkcs11-devel-3.19.1-5.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.19.1-7.el7_1.2
Fixes 3 records
Priority MEDIUM 55
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, all…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10238 · Published 2015-11-05 · Partial fix CWE-119
Priority MEDIUM 43
Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06792 · Published 2015-11-05 · Partial fix CWE-119
Priority MEDIUM 43
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, improperly restri…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06932 · Published 2015-11-05 · Partial fix CWE-119
THREATIST.IORead the docs