Red Hat Security Advisory

RHSA-2020:0466

nss-softokn security update

Released 2020-02-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 6.6) nss-softokn-3.14.3-23.el6_6, nss-softokn-devel-3.14.3-23.el6_6, nss-softokn-freebl-3.14.3-23.el6_6 +1

Fixes 1 record

TI-2019-08802 CVE-2019-11745 · GHSA-gmvm-jpfj-v3f5

Out-of-bounds write in Mozilla Thunderbird

MEDIUM 44

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02994 Published 2020-01-08 Partial fix · 68.3, 71 CWE-787