Medium: nss-softokn

Issue Overview:

new tlsfuzzer code can still detect timing issues in RSA operations (CVE-2023-4421)

Affected Packages:

nss-softokn

Issue Correction:
Run yum update nss-softokn to update your system.

New Packages:

i686:  
    nss-softokn-3.53.1-6.48.amzn1.i686  
    nss-softokn-freebl-devel-3.53.1-6.48.amzn1.i686  
    nss-softokn-debuginfo-3.53.1-6.48.amzn1.i686  
    nss-softokn-devel-3.53.1-6.48.amzn1.i686  
    nss-softokn-freebl-3.53.1-6.48.amzn1.i686  
  
src:  
    nss-softokn-3.53.1-6.48.amzn1.src  
  
x86_64:  
    nss-softokn-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-devel-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-freebl-devel-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-debuginfo-3.53.1-6.48.amzn1.x86_64  
    nss-softokn-freebl-3.53.1-6.48.amzn1.x86_64  

Additional References

Red Hat: CVE-2023-4421

Mitre: CVE-2023-4421