Medium ELSA-2024-0105 1 CVE

Moderate: nss security update (Oracle Linux 8)

Published Jan 10, 2024 · Updated Jan 10, 2024

Ecosystem: Oracle Linux

Summary

[3.90.0-4]
- Fix expired certs in tests
- Fix CVE-2023-5388

Fixed packages 10

Release	Package	Fixed in
Oracle Linux · 8	nss	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-devel	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-softokn	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-softokn-devel	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-softokn-freebl	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-softokn-freebl-devel	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-sysinit	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-tools	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-util	0:3.90.0-4.el8_9
Oracle Linux · 8	nss-util-devel	0:3.90.0-4.el8_9

Vulnerabilities 1

Medium 6.5

CVE-2023-5388

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 19, 2024