Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr | 0:4.25.0-2.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr-debuginfo | 0:4.25.0-2.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr-debugsource | 0:4.25.0-2.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nspr-devel | 0:4.25.0-2.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-debuginfo | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-debugsource | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-devel | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-debuginfo | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-devel | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-freebl | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-freebl-debuginfo | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-softokn-freebl-devel | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-sysinit | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-sysinit-debuginfo | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-tools | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-tools-debuginfo | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-util | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-util-debuginfo | 0:3.53.1-11.el8_2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | nss-util-devel | 0:3.53.1-11.el8_2 |
Vulnerabilities 5
-
Unscored —
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial o…
-
Unscored —
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases wh…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak privat…
-
Unscored —
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which ent…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1663187
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1691454
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1711375
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724250
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1750921
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1774835
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1775916
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1791225
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1809637
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1825270
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1826231
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1854564
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3280.json
-
report
https://access.redhat.com/security/cve/CVE-2019-11756
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-11756
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-11756
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
-
report
https://access.redhat.com/security/cve/CVE-2019-17006
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-17006
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-17006
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
-
report
https://access.redhat.com/security/cve/CVE-2019-17023
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-17023
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-17023
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
-
report
https://access.redhat.com/security/cve/CVE-2020-12399
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1826177
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-12399
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-12399
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.4_release_notes
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52.1_release_notes
-
report
https://access.redhat.com/security/cve/CVE-2020-12402
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-12402
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-12402
-
article
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes