Red Hat Security AdvisoryRHSA-2017:2832
nss security update
Released 2017-09-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.28.4-12.el7_4, nss-sysinit-3.28.4-12.el7_4, nss-tools-3.28.4-12.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.28.4-12.el7_4, nss-pkcs11-devel-3.28.4-12.el7_4
- Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.28.4-12.el7_4, nss-sysinit-3.28.4-12.el7_4, nss-tools-3.28.4-12.el7_4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.28.4-12.el7_4, nss-pkcs11-devel-3.28.4-12.el7_4
- Red Hat Enterprise Linux Desktop (v. 6) nss-3.28.4-4.el6_9, nss-sysinit-3.28.4-4.el6_9, nss-tools-3.28.4-4.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) nss-devel-3.28.4-4.el6_9, nss-pkcs11-devel-3.28.4-4.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) nss-3.28.4-4.el6_9, nss-sysinit-3.28.4-4.el6_9, nss-tools-3.28.4-4.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) nss-devel-3.28.4-4.el6_9, nss-pkcs11-devel-3.28.4-4.el6_9
- Red Hat Enterprise Linux Server (v. 6) nss-3.28.4-4.el6_9, nss-3.28.4-4.el6_9.ppc, nss-devel-3.28.4-4.el6_9 +3
- Red Hat Enterprise Linux Server (v. 7) nss-3.28.4-12.el7_4, nss-3.28.4-12.el7_4.ppc, nss-devel-3.28.4-12.el7_4 +3
- Red Hat Enterprise Linux Server Optional (v. 6) nss-pkcs11-devel-3.28.4-4.el6_9, nss-pkcs11-devel-3.28.4-4.el6_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.28.4-12.el7_4, nss-pkcs11-devel-3.28.4-12.el7_4.ppc
- Red Hat Enterprise Linux Workstation (v. 6) nss-3.28.4-4.el6_9, nss-devel-3.28.4-4.el6_9, nss-sysinit-3.28.4-4.el6_9 +1
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.28.4-12.el7_4, nss-devel-3.28.4-12.el7_4, nss-sysinit-3.28.4-12.el7_4 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) nss-pkcs11-devel-3.28.4-4.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.28.4-12.el7_4
Fixes 1 record
Priority LOW 38
During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0305 · Published 2018-06-11 · Partial fix · 56, 52.4 CWE-416