Red Hat Security AdvisoryRHSA-2023:1332
nss security update
Released 2023-03-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) nss-3.79.0-5.el7_9, nss-sysinit-3.79.0-5.el7_9, nss-tools-3.79.0-5.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) nss-devel-3.79.0-5.el7_9, nss-pkcs11-devel-3.79.0-5.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) nss-devel-3.79.0-5.el7_9, nss-pkcs11-devel-3.79.0-5.el7_9
- Red Hat Enterprise Linux Server (v. 7) nss-3.79.0-5.el7_9, nss-3.79.0-5.el7_9.ppc, nss-devel-3.79.0-5.el7_9 +3
- Red Hat Enterprise Linux Server Optional (v. 7) nss-pkcs11-devel-3.79.0-5.el7_9, nss-pkcs11-devel-3.79.0-5.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) nss-3.79.0-5.el7_9, nss-devel-3.79.0-5.el7_9, nss-sysinit-3.79.0-5.el7_9 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) nss-pkcs11-devel-3.79.0-5.el7_9
Fixes 1 record
Priority MEDIUM 42
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00817 · Published 2023-06-02 · Fixed in 110, 102.8
