Red Hat Security AdvisoryRHSA-2017:1100
nss and nss-util security update
Released 2017-04-20 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.28.4-1.0.el7_3, nss-sysinit-3.28.4-1.0.el7_3, nss-tools-3.28.4-1.0.el7_3 +1
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.28.4-1.0.el7_3, nss-pkcs11-devel-3.28.4-1.0.el7_3, nss-util-devel-3.28.4-1.0.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.28.4-1.0.el7_3, nss-sysinit-3.28.4-1.0.el7_3, nss-tools-3.28.4-1.0.el7_3 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.28.4-1.0.el7_3, nss-pkcs11-devel-3.28.4-1.0.el7_3, nss-util-devel-3.28.4-1.0.el7_3
- Red Hat Enterprise Linux Desktop (v. 6) nss-3.28.4-1.el6_9, nss-sysinit-3.28.4-1.el6_9, nss-tools-3.28.4-1.el6_9 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) nss-devel-3.28.4-1.el6_9, nss-pkcs11-devel-3.28.4-1.el6_9, nss-util-devel-3.28.4-1.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) nss-3.28.4-1.el6_9, nss-sysinit-3.28.4-1.el6_9, nss-tools-3.28.4-1.el6_9 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nss-devel-3.28.4-1.el6_9, nss-pkcs11-devel-3.28.4-1.el6_9, nss-util-devel-3.28.4-1.el6_9
- Red Hat Enterprise Linux Server (v. 6) nss-3.28.4-1.el6_9, nss-3.28.4-1.el6_9.ppc, nss-devel-3.28.4-1.el6_9 +7
- Red Hat Enterprise Linux Server (v. 7) nss-3.28.4-1.0.el7_3, nss-3.28.4-1.0.el7_3.ppc, nss-devel-3.28.4-1.0.el7_3 +7
- Red Hat Enterprise Linux Server Optional (v. 6) nss-pkcs11-devel-3.28.4-1.el6_9, nss-pkcs11-devel-3.28.4-1.el6_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.28.4-1.0.el7_3, nss-pkcs11-devel-3.28.4-1.0.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nss-3.28.4-1.el6_9, nss-devel-3.28.4-1.el6_9, nss-sysinit-3.28.4-1.el6_9 +3
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.28.4-1.0.el7_3, nss-devel-3.28.4-1.0.el7_3, nss-sysinit-3.28.4-1.0.el7_3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-pkcs11-devel-3.28.4-1.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.28.4-1.0.el7_3
Fixes 1 record
Priority MEDIUM 50
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or pos…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04703 · Published 2017-05-11 · Partial fix · 52.1, 45.9 +1 CWE-787
