Red Hat Security AdvisoryRHSA-2016:0685
nss, nspr, nss-softokn, and nss-util security, bug fix, and enhancement update
Released 2016-04-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nspr-4.11.0-1.el7_2, nss-3.21.0-9.el7_2, nss-softokn-3.16.2.3-14.2.el7_2 +4
- Red Hat Enterprise Linux Client Optional (v. 7) nspr-devel-4.11.0-1.el7_2, nss-devel-3.21.0-9.el7_2, nss-pkcs11-devel-3.21.0-9.el7_2 +3
- Red Hat Enterprise Linux ComputeNode (v. 7) nspr-4.11.0-1.el7_2, nss-3.21.0-9.el7_2, nss-softokn-3.16.2.3-14.2.el7_2 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nspr-devel-4.11.0-1.el7_2, nss-devel-3.21.0-9.el7_2, nss-pkcs11-devel-3.21.0-9.el7_2 +3
- Red Hat Enterprise Linux Server (v. 7) nspr-4.11.0-1.el7_2, nspr-4.11.0-1.el7_2.ppc, nspr-devel-4.11.0-1.el7_2 +19
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.21.0-9.el7_2, nss-pkcs11-devel-3.21.0-9.el7_2.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nspr-4.11.0-1.el7_2, nspr-devel-4.11.0-1.el7_2, nss-3.21.0-9.el7_2 +9
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.21.0-9.el7_2
Fixes 2 records
Priority MEDIUM 42
Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a d…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02171 · Published 2016-03-13 · Fixed
Priority LOW 37
Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of s…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.02386 · Published 2016-03-13 · Fixed
