nss - security update

Fixed packages 1

Vulnerabilities 5

• High 8.8
  CVE-2023-0767

  An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 1…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jun 2, 2023
• Unscored —
  CVE-2020-12400

  When converting coordinates from projective to affine, the modular inversion was not performed in constant time, result…

  Mozilla Firefox Firefox for Android firefox Android Browsers Debian Ubuntu Alpine
  Oct 8, 2020
• Unscored —
  CVE-2020-12401

  During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication …

  Mozilla Firefox Firefox for Android firefox Android Browsers Debian Ubuntu Alpine
  Oct 8, 2020
• Unscored —
  CVE-2020-12403

  A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Cha…

  nss nss nss nss Debian Ubuntu Azure Linux Alpine
  May 27, 2021
• Unscored —
  CVE-2020-6829

  When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial …

  Mozilla Firefox Firefox for Android firefox Android Browsers Debian Ubuntu Alpine
  Oct 28, 2020