High ELSA-2023-1332 1 CVE

Important: nss security update (Oracle Linux 7)

Published Mar 20, 2023 · Updated Mar 20, 2023

Ecosystem: Oracle Linux

Summary

[3.79.0-5]
- fix CVE-2023-0767

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	nss	0:3.79.0-5.el7_9
Oracle Linux · 7	nss-devel	0:3.79.0-5.el7_9
Oracle Linux · 7	nss-pkcs11-devel	0:3.79.0-5.el7_9
Oracle Linux · 7	nss-sysinit	0:3.79.0-5.el7_9
Oracle Linux · 7	nss-tools	0:3.79.0-5.el7_9

Vulnerabilities 1

High 8.8

CVE-2023-0767

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 1…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jun 2, 2023