Red Hat Security AdvisoryRHSA-2016:0591
nss, nss-util, and nspr security, bug fix, and enhancement update
Released 2016-04-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) nspr-4.11.0-0.1.el6_7, nss-3.21.0-0.3.el6_7, nss-sysinit-3.21.0-0.3.el6_7 +2
- Red Hat Enterprise Linux Desktop Optional (v. 6) nspr-devel-4.11.0-0.1.el6_7, nss-devel-3.21.0-0.3.el6_7, nss-pkcs11-devel-3.21.0-0.3.el6_7 +1
- Red Hat Enterprise Linux HPC Node (v. 6) nspr-4.11.0-0.1.el6_7, nss-3.21.0-0.3.el6_7, nss-sysinit-3.21.0-0.3.el6_7 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nspr-devel-4.11.0-0.1.el6_7, nss-devel-3.21.0-0.3.el6_7, nss-pkcs11-devel-3.21.0-0.3.el6_7 +1
- Red Hat Enterprise Linux Server (v. 6) nspr-4.11.0-0.1.el6_7, nspr-4.11.0-0.1.el6_7.ppc, nspr-devel-4.11.0-0.1.el6_7 +11
- Red Hat Enterprise Linux Server Optional (v. 6) nss-pkcs11-devel-3.21.0-0.3.el6_7, nss-pkcs11-devel-3.21.0-0.3.el6_7.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nspr-4.11.0-0.1.el6_7, nspr-devel-4.11.0-0.1.el6_7, nss-3.21.0-0.3.el6_7 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-pkcs11-devel-3.21.0-0.3.el6_7
Fixes 2 records
Priority MEDIUM 42
Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a d…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02171 · Published 2016-03-13 · Fixed
Priority LOW 37
Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of s…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.02386 · Published 2016-03-13 · Fixed
