Red Hat Security AdvisoryRHSA-2020:1461
nss-softokn security update
Released 2020-04-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) nss-softokn-3.36.0-6.el7_6, nss-softokn-freebl-3.36.0-6.el7_6
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) nss-softokn-devel-3.36.0-6.el7_6, nss-softokn-freebl-devel-3.36.0-6.el7_6
- Red Hat Enterprise Linux Server EUS (v. 7.6) nss-softokn-3.36.0-6.el7_6, nss-softokn-3.36.0-6.el7_6.ppc, nss-softokn-devel-3.36.0-6.el7_6 +5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) nss-softokn-3.36.0-6.el7_6, nss-softokn-devel-3.36.0-6.el7_6, nss-softokn-freebl-3.36.0-6.el7_6 +1
Fixes 2 records
Priority MEDIUM 44
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02994 · Published 2020-01-08 · Partial fix · 68.3, 71 CWE-787
Priority LOW 23
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign functi…
CVSS 3.0MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00869 · Published 2018-06-13 · Partial fix CWE-203
