Summary
nspr
[4.10.8-2]
- Resolves: Bug 1269360 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption
nss
[3.19.1-5.0.1]
- Added nss-vendor.patch to change vendor
[3.19.1-5]
- Rebuild against updated NSPR
[3.19.1-4]
- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450
nss-util
[3.19.1-2]
- Resolves: Bug 1269355 - CVE-2015-7182 CVE-2015-7181
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | nspr | 0:4.10.8-2.el7_1 |
| Oracle Linux · 7 | nspr-devel | 0:4.10.8-2.el7_1 |
| Oracle Linux · 7 | nss | 0:3.19.1-7.0.1.el7_1.2 |
| Oracle Linux · 7 | nss-devel | 0:3.19.1-7.0.1.el7_1.2 |
| Oracle Linux · 7 | nss-pkcs11-devel | 0:3.19.1-7.0.1.el7_1.2 |
| Oracle Linux · 7 | nss-sysinit | 0:3.19.1-7.0.1.el7_1.2 |
| Oracle Linux · 7 | nss-tools | 0:3.19.1-7.0.1.el7_1.2 |
| Oracle Linux · 7 | nss-util | 0:3.19.1-4.el7_1 |
| Oracle Linux · 7 | nss-util-devel | 0:3.19.1-4.el7_1 |
Vulnerabilities 3
-
Unscored —
The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, …
-
Unscored —CVE-2015-7182 EPSS 10%
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x b…
-
Unscored —
Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Securit…