High ELSA-2017-2832 1 CVE

Important: nss security update (Oracle Linux 7)

Published Sep 28, 2017 · Updated Sep 28, 2017

Ecosystem: Oracle Linux

Summary

[3.28.4-12]
- Backport patch to simplify transcript calculation for CertificateVerify

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	nss	0:3.28.4-12.el7_4
Oracle Linux · 7	nss-devel	0:3.28.4-12.el7_4
Oracle Linux · 7	nss-pkcs11-devel	0:3.28.4-12.el7_4
Oracle Linux · 7	nss-sysinit	0:3.28.4-12.el7_4
Oracle Linux · 7	nss-tools	0:3.28.4-12.el7_4

Vulnerabilities 1

Unscored —

CVE-2017-7805

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This saved data is used for l…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018