Rocky Linux 8.10 [CIQ] Security Update: nspr / nspr-devel / nss / nss-debuginfo / nss-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0605)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260605 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.10 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 8.6 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / etc Multiple Vulnerabilities (ciqsa-2026_0867)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260867 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.6 Certified. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 8.10 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / etc Multiple Vulnerabilities (ciqsa-2026_0869)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260869 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.10 Certified. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 8.6 [CIQ] Security Update: nspr / nspr-devel / nss / nss-debuginfo / nss-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0592)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260592 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.6 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: nspr-debuginfo Multiple Vulnerabilities (ciqsa-2026_1225)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261225 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 9.2 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 8.6 [CIQ] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-softokn / etc Multiple Vulnerabilities (ciqsa-2026_0950)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260950 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2023-5388, CVE-2023-0767. Tenable has extracted the...

Photon OS 5.0: Nss PHSA-2024-5.0-91-0190

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-92-0190

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 9 : nss-3.79.0-17.el9 (AXSA:2023-5231:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5231:02 advisory. nss: Arbitrary memory write via PKCS 12 CVE-2023-0767 Bug Fixes: In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the...

MiracleLinux 8 : thunderbird-102.8.0-2.el8.ML.1 (AXSA:2023-5135:10)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-5135:10 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes...

TencentOS Server 2: nss (TSSA-2023:0035)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0035 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 2: thunderbird (TSSA-2023:0029)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0029 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 3: nss (TSSA-2023:0025)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0025 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.423)

The version of AHV installed on the remote host is prior to 20220304.423. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.423 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via...

openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:0461-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for mozilla (SUSE-SU-2023:0434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for mozilla (SUSE-SU-2023:0443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.10057)

The version of AHV installed on the remote host is prior to 20220304.10057. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.10057 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Mozilla Network Security Services (NSS) arbitrary code execution vulnerability( CVE-2023-0767)

Summary Potential Mozilla Network Security Services NSS arbitrary code execution vulnerability CVE-2023-0767 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-0767 DESCRIPTION:...

USN-5892-1: NSS vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that NSS incorrectly handled client authentication without a user certificate in the database. A remote attacker could possibly use this issue to cause a NSS client to crash, resulting i...