Red Hat Security Advisory

RHSA-2019:4114

nss security update

Released 2019-12-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) nss-3.44.0-9.el8_1, nss-devel-3.44.0-9.el8_1, nss-softokn-3.44.0-9.el8_1 +7

Fixes 1 record

TI-2019-08802 CVE-2019-11745 · GHSA-gmvm-jpfj-v3f5

Out-of-bounds write in Mozilla Thunderbird

MEDIUM 44

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02994 Published 2020-01-08 Partial fix · 68.3, 71 CWE-787