Red Hat Security Advisory

RHSA-2020:0243

nss security update

Released 2020-01-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.0) nss-3.44.0-8.el8_0, nss-devel-3.44.0-8.el8_0, nss-softokn-3.44.0-8.el8_0 +7

Fixes 1 record

TI-2019-08802 CVE-2019-11745 · GHSA-gmvm-jpfj-v3f5

Out-of-bounds write in Mozilla Thunderbird

MEDIUM 44

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02994 Published 2020-01-08 Partial fix · 68.3, 71 CWE-787