Skip to content
OpenAdvisories
Unscored RHSA-2009:1184 3 CVEs

Red Hat Security Advisory: nspr and nss security and bug fix update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as nspr 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::as nspr-debuginfo 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::as nspr-devel 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::as nss 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as nss-debuginfo 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as nss-devel 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::as nss-tools 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-debuginfo 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop nspr-devel 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::desktop nss 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-debuginfo 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-devel 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::desktop nss-tools 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es nspr 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es nspr-debuginfo 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es nspr-devel 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::es nss 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es nss-debuginfo 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es nss-devel 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::es nss-tools 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws nspr 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-debuginfo 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws nspr-devel 0:4.7.4-1.el4_8.1
Red Hat · RHEL 4 enterprise_linux:4::ws nss 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws nss-debuginfo 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws nss-devel 0:3.12.3.99.3-1.el4_8.2
Red Hat · RHEL 4 enterprise_linux:4::ws nss-tools 0:3.12.3.99.3-1.el4_8.2

Vulnerabilities 3

  • Unscored —
    CVE-2009-2404

    Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as …

    nss Debian
  • Unscored —
    CVE-2009-2408

    Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonke…

    nss Debian
  • Unscored —
    CVE-2009-2409

    The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0…

    openssl nss Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=508027
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=510197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=510251
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512912
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1184.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2404
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2404
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2404
  • report
    https://access.redhat.com/security/cve/CVE-2009-2408
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2408
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2408
  • report
    https://access.redhat.com/security/cve/CVE-2009-2409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2409