Summary
[3.44.0-9]
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775912)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | nss | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-devel | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-softokn | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-softokn-devel | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-softokn-freebl | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-softokn-freebl-devel | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-sysinit | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-tools | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-util | 0:3.44.0-9.el8_1 |
| Oracle Linux · 8 | nss-util-devel | 0:3.44.0-9.el8_1 |
Vulnerabilities 1
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…