Red Hat Security AdvisoryRHSA-2021:1384
nss security and bug fix update
Released 2021-04-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.53.1-7.el7_9, nss-sysinit-3.53.1-7.el7_9, nss-tools-3.53.1-7.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.53.1-7.el7_9, nss-pkcs11-devel-3.53.1-7.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.53.1-7.el7_9, nss-pkcs11-devel-3.53.1-7.el7_9
- Red Hat Enterprise Linux Server (v. 7) nss-3.53.1-7.el7_9, nss-3.53.1-7.el7_9.ppc, nss-devel-3.53.1-7.el7_9 +3
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.53.1-7.el7_9, nss-pkcs11-devel-3.53.1-7.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.53.1-7.el7_9, nss-devel-3.53.1-7.el7_9, nss-sysinit-3.53.1-7.el7_9 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.53.1-7.el7_9
Fixes 1 record
Priority LOW 39
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03505 · Published 2020-10-20 · Partial fix CWE-770