Red Hat Security AdvisoryRHSA-2019:4190
nss, nss-softokn, nss-util security update
Released 2019-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.44.0-7.el7_7, nss-softokn-3.44.0-8.el7_7, nss-softokn-freebl-3.44.0-8.el7_7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.44.0-7.el7_7, nss-pkcs11-devel-3.44.0-7.el7_7, nss-softokn-devel-3.44.0-8.el7_7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) nss-3.44.0-7.el7_7, nss-softokn-3.44.0-8.el7_7, nss-softokn-freebl-3.44.0-8.el7_7 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.44.0-7.el7_7, nss-pkcs11-devel-3.44.0-7.el7_7, nss-softokn-devel-3.44.0-8.el7_7 +2
- Red Hat Enterprise Linux Server (v. 7) nss-3.44.0-7.el7_7, nss-3.44.0-7.el7_7.ppc, nss-devel-3.44.0-7.el7_7 +15
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.44.0-7.el7_7, nss-pkcs11-devel-3.44.0-7.el7_7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.44.0-7.el7_7, nss-devel-3.44.0-7.el7_7, nss-softokn-3.44.0-8.el7_7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.44.0-7.el7_7
Fixes 2 records
Priority MEDIUM 44
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02994 · Published 2020-01-08 · Partial fix · 68.3, 71 CWE-787
Priority LOW 38
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02794 · Published 2019-07-23 · Partial fix · 60.8, 68 CWE-119
