Red Hat Security Advisory

RHSA-2021:3572

nss and nspr security, bug fix, and enhancement update

Released 2021-09-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) nspr-4.32.0-1.el8_4, nspr-devel-4.32.0-1.el8_4, nss-3.67.0-6.el8_4 +9

TI-2020-15665 CVE-2020-25648 · GHSA-43j5-76vw-pq2j

LOW 39

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03505 Published 2020-10-20 Partial fix CWE-770