Red Hat Security Advisory

RHSA-2021:4932

nss security update

Released 2021-12-06 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.4) nss-3.28.4-18.el7_4, nss-devel-3.28.4-18.el7_4, nss-sysinit-3.28.4-18.el7_4 +1
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) nss-pkcs11-devel-3.28.4-18.el7_4

Fixes 1 record

TI-2021-19417 CVE-2021-43527 · GHSA-7hfm-39v6-v3p5

Out-of-bounds write in Mozilla NSS

MEDIUM 59

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17563 Published 2021-12-08 Fixed in 3.73, 3.68.1 CWE-787