ALBA-2021:2571 sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

Amazon Linux 2 : nss (ALAS-2021-1664)

The version of nss installed on the remote host is prior to 3.53.1-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1664 advisory. A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple...

Medium: nss

Issue Overview: A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system...

Photon OS 3.0: Nss PHSA-2021-3.0-0254

An update of the nss package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0254. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Photon OS 1.0: Nss PHSA-2021-1.0-0404

An update of the nss package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0404. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

Photon OS 2.0: Nss PHSA-2021-2.0-0358

An update of the nss package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0358. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

Critical Photon OS Security Update - PHSA-2021-0254

Updates of 'nss', 'linux-rt', 'libjpeg-turbo', 'linux-esx', 'linux', 'zookeeper', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0404

An update of 'nss', 'libjpeg-turbo' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2021-3.0-0254

Updates of 'libjpeg-turbo', 'linux-aws', 'nss', 'linux', 'linux-secure', 'linux-esx', 'zookeeper', 'linux-rt' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2021-0404

Updates of 'libjpeg-turbo', 'nss' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0358

An update of 'libjpeg-turbo', 'nss', 'zookeeper' packages of Photon OS has been released...

CVE-2020-12403 affecting package nss 3.44-6

CVE-2020-12403 affecting package nss 3.44-6. A patched version of the package is available...

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2019:14260-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14260-1 advisory. - When encrypting with a block cipher, if a call to NSCEncryptUpdate was made with data smaller than the block size, a small out of bounds wri...

SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss, mozilla-nspr (SUSE-SU-2019:14114-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2019:14114-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...

SUSE SLES11 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2020:14418-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14418-1 advisory. - A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when...

Exploit for Off-by-one Error in Sudo_Project Sudo

This is an exploit module/toolkit targeting the CVE-2021-3156 sudo vulnerability, dubbed Baron Samedit by Qualys. The target product/service is the sudo command, and the vulnerability class/vector is a heap-based overflow. The probable entry point is the sudoedit function, which is a part of the...

SUSE: Security Advisory (SUSE-SU-2015:0171-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:1220-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:0777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...