Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | nss | 2:3.42.1-1+deb10u3 |
Vulnerabilities 4
-
Unscored —
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak privat…
-
Unscored —
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…