High ELSA-2023-1252 1 CVE

Important: nss security update (Oracle Linux 8)

Published Mar 15, 2023 · Updated Mar 15, 2023

Ecosystem: Oracle Linux

Summary

[3.79.0-11]
- Fix CVE-2023-0767

Fixed packages 10

Release	Package	Fixed in
Oracle Linux · 8	nss	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-devel	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-softokn	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-softokn-devel	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-softokn-freebl	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-softokn-freebl-devel	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-sysinit	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-tools	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-util	0:3.79.0-11.el8_7
Oracle Linux · 8	nss-util-devel	0:3.79.0-11.el8_7

Vulnerabilities 1

High 8.8

CVE-2023-0767

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 1…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jun 2, 2023