Red Hat Security AdvisoryRHSA-2016:2779
nss and nss-util security update
Released 2016-11-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) nss-3.21.3-2.el5_11, nss-3.21.3-2.el5_11.i386, nss-3.21.3-2.el5_11.ia64 +13
- Red Hat Enterprise Linux Client (v. 7) nss-3.21.3-2.el7_3, nss-sysinit-3.21.3-2.el7_3, nss-tools-3.21.3-2.el7_3 +1
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.21.3-2.el7_3, nss-pkcs11-devel-3.21.3-2.el7_3, nss-util-devel-3.21.3-1.1.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.21.3-2.el7_3, nss-sysinit-3.21.3-2.el7_3, nss-tools-3.21.3-2.el7_3 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.21.3-2.el7_3, nss-pkcs11-devel-3.21.3-2.el7_3, nss-util-devel-3.21.3-1.1.el7_3
- Red Hat Enterprise Linux Desktop (v. 5 client) nss-3.21.3-2.el5_11, nss-3.21.3-2.el5_11.i386, nss-tools-3.21.3-2.el5_11 +1
- Red Hat Enterprise Linux Desktop (v. 6) nss-3.21.3-2.el6_8, nss-sysinit-3.21.3-2.el6_8, nss-tools-3.21.3-2.el6_8 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) nss-devel-3.21.3-2.el6_8, nss-pkcs11-devel-3.21.3-2.el6_8, nss-util-devel-3.21.3-1.el6_8
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) nss-3.21.3-2.el5_11, nss-devel-3.21.3-2.el5_11, nss-devel-3.21.3-2.el5_11.i386 +2
- Red Hat Enterprise Linux HPC Node (v. 6) nss-3.21.3-2.el6_8, nss-sysinit-3.21.3-2.el6_8, nss-tools-3.21.3-2.el6_8 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nss-devel-3.21.3-2.el6_8, nss-pkcs11-devel-3.21.3-2.el6_8, nss-util-devel-3.21.3-1.el6_8
- Red Hat Enterprise Linux Server (v. 6) nss-3.21.3-2.el6_8, nss-3.21.3-2.el6_8.ppc, nss-devel-3.21.3-2.el6_8 +7
- Red Hat Enterprise Linux Server (v. 7) nss-3.21.3-2.el7_3, nss-3.21.3-2.el7_3.ppc, nss-devel-3.21.3-2.el7_3 +7
- Red Hat Enterprise Linux Server Optional (v. 6) nss-pkcs11-devel-3.21.3-2.el6_8, nss-pkcs11-devel-3.21.3-2.el6_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.21.3-2.el7_3, nss-pkcs11-devel-3.21.3-2.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nss-3.21.3-2.el6_8, nss-devel-3.21.3-2.el6_8, nss-sysinit-3.21.3-2.el6_8 +3
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.21.3-2.el7_3, nss-devel-3.21.3-2.el7_3, nss-sysinit-3.21.3-2.el7_3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-pkcs11-devel-3.21.3-2.el6_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.21.3-2.el7_3
Fixes 3 records
Priority MEDIUM 44
Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified oth…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0338 · Published 2016-06-13 · Fixed
Priority LOW 37
A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02279 · Published 2019-11-15 · Fixed CWE-476
Priority LOW 30
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01989 · Published 2018-08-01 · Fixed CWE-358
