(RHSA-2024:0093) Moderate: nss security update

2024-01-0914:47:34

access.redhat.com

rhsa-2024-0093

nss

libraries

cross-platform

security-enabled

timing attack

rsa decryption

cve-2023-5388

cvss

references

unix

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

nss: timing attack against RSA decryption (CVE-2023-5388)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64nss-softokn-freebl-debuginfo< 3.90.0-4.el8_8nss-softokn-freebl-debuginfo-3.90.0-4.el8_8.x86_64.rpm
RedHat8i686nss-softokn-debuginfo< 3.90.0-4.el8_8nss-softokn-debuginfo-3.90.0-4.el8_8.i686.rpm
RedHat8s390xnss-softokn-freebl< 3.90.0-4.el8_8nss-softokn-freebl-3.90.0-4.el8_8.s390x.rpm
RedHat8x86_64nss-debugsource< 3.90.0-4.el8_8nss-debugsource-3.90.0-4.el8_8.x86_64.rpm
RedHat8aarch64nss-tools-debuginfo< 3.90.0-4.el8_8nss-tools-debuginfo-3.90.0-4.el8_8.aarch64.rpm
RedHat8i686nss-softokn-freebl-debuginfo< 3.90.0-4.el8_8nss-softokn-freebl-debuginfo-3.90.0-4.el8_8.i686.rpm
RedHat8s390xnss-softokn-debuginfo< 3.90.0-4.el8_8nss-softokn-debuginfo-3.90.0-4.el8_8.s390x.rpm
RedHat8aarch64nss-util-devel< 3.90.0-4.el8_8nss-util-devel-3.90.0-4.el8_8.aarch64.rpm
RedHat8s390xnss-devel< 3.90.0-4.el8_8nss-devel-3.90.0-4.el8_8.s390x.rpm
RedHat8s390xnss-softokn< 3.90.0-4.el8_8nss-softokn-3.90.0-4.el8_8.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	nss-softokn-freebl-debuginfo	< 3.90.0-4.el8_8	nss-softokn-freebl-debuginfo-3.90.0-4.el8_8.x86_64.rpm
RedHat	8	i686	nss-softokn-debuginfo	< 3.90.0-4.el8_8	nss-softokn-debuginfo-3.90.0-4.el8_8.i686.rpm
RedHat	8	s390x	nss-softokn-freebl	< 3.90.0-4.el8_8	nss-softokn-freebl-3.90.0-4.el8_8.s390x.rpm
RedHat	8	x86_64	nss-debugsource	< 3.90.0-4.el8_8	nss-debugsource-3.90.0-4.el8_8.x86_64.rpm
RedHat	8	aarch64	nss-tools-debuginfo	< 3.90.0-4.el8_8	nss-tools-debuginfo-3.90.0-4.el8_8.aarch64.rpm
RedHat	8	i686	nss-softokn-freebl-debuginfo	< 3.90.0-4.el8_8	nss-softokn-freebl-debuginfo-3.90.0-4.el8_8.i686.rpm
RedHat	8	s390x	nss-softokn-debuginfo	< 3.90.0-4.el8_8	nss-softokn-debuginfo-3.90.0-4.el8_8.s390x.rpm
RedHat	8	aarch64	nss-util-devel	< 3.90.0-4.el8_8	nss-util-devel-3.90.0-4.el8_8.aarch64.rpm
RedHat	8	s390x	nss-devel	< 3.90.0-4.el8_8	nss-devel-3.90.0-4.el8_8.s390x.rpm
RedHat	8	s390x	nss-softokn	< 3.90.0-4.el8_8	nss-softokn-3.90.0-4.el8_8.s390x.rpm