Red Hat Security AdvisoryRHSA-2021:4904
nss security update
Released 2021-12-01 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.67.0-4.el7_9, nss-sysinit-3.67.0-4.el7_9, nss-tools-3.67.0-4.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.67.0-4.el7_9, nss-pkcs11-devel-3.67.0-4.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.67.0-4.el7_9, nss-pkcs11-devel-3.67.0-4.el7_9
- Red Hat Enterprise Linux Server (v. 7) nss-3.67.0-4.el7_9, nss-3.67.0-4.el7_9.ppc, nss-devel-3.67.0-4.el7_9 +3
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.67.0-4.el7_9, nss-pkcs11-devel-3.67.0-4.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.67.0-4.el7_9, nss-devel-3.67.0-4.el7_9, nss-sysinit-3.67.0-4.el7_9 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.67.0-4.el7_9
Fixes 1 record
Priority MEDIUM 59
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.17563 · Published 2021-12-08 · Fixed in 3.73, 3.68.1 CWE-787
