Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr | 0:4.21.0-2.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr-debuginfo | 0:4.21.0-2.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr-debugsource | 0:4.21.0-2.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr-devel | 0:4.21.0-2.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-debugsource | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-devel | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-devel | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-freebl | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-freebl-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-freebl-devel | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-sysinit | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-sysinit-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-tools | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-tools-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-util | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-util-debuginfo | 0:3.44.0-7.el8_0 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-util-devel | 0:3.44.0-7.el8_0 |
Vulnerabilities 5
-
Unscored —
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a nu…
-
Unscored —
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bo…
-
Unscored —
A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1…
-
Unscored —
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before …
-
Unscored —
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting i…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1671310
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1685325
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719629
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1719630
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1722373
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1722374
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1725059
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1725110
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1725115
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1725116
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1728259
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1728260
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1728261
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1728436
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1728437
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1730988
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1951.json
-
report
https://access.redhat.com/security/cve/CVE-2018-18508
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-18508
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18508
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes
-
report
https://access.redhat.com/security/cve/CVE-2019-11719
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-11719
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-11719
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719
-
report
https://access.redhat.com/security/cve/CVE-2019-11727
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-11727
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-11727
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727
-
report
https://access.redhat.com/security/cve/CVE-2019-11729
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-11729
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-11729
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11729
-
report
https://access.redhat.com/security/cve/CVE-2019-17007
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1703979
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-17007
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-17007