Red Hat Security AdvisoryRHSA-2023:1406
nss security update
Released 2023-03-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) nss-3.53.1-13.el8_2, nss-devel-3.53.1-13.el8_2, nss-softokn-3.53.1-13.el8_2 +7
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) nss-3.53.1-13.el8_2, nss-devel-3.53.1-13.el8_2, nss-softokn-3.53.1-13.el8_2 +7
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) nss-3.53.1-13.el8_2, nss-devel-3.53.1-13.el8_2, nss-softokn-3.53.1-13.el8_2 +7
Fixes 1 record
Priority MEDIUM 42
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00817 · Published 2023-06-02 · Fixed in 110, 102.8
