CentOS 8 : nss and nspr (CESA-2019:1951)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1951 advisory. - nss: NULL pointer dereference in several CMS functions resulting in a denial of service CVE-2018-18508 - nss: Out-of-bounds read when importing...

Important Photon OS Security Update - PHSA-2021-0358

Updates of 'sudo', 'pkg-config' packages of Photon OS have been released...

CentOS 8 : nss (CESA-2019:4114)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:4114 advisory. - nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSCEncryptUpdate CVE-2019-11745 Note that Nessus has not tested for this...

Fedora 33 : firefox / nss (2021-1d4180de72)

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-1d4180de72 advisory. - New Firefox version 85.0 with various Wayland fixes. New NSS version 3.60. FEDORA-2021-1d4180de72 Note that Nessus has not tested for this issue but has...

Fedora: Security Advisory for nss (FEDORA-2021-48ff299b05)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for nss (FEDORA-2021-1d4180de72)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: nss-3.60.1-1.fc32

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Fedora 32 : firefox / nss (2021-48ff299b05)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-48ff299b05 advisory. - New Firefox version 85.0 with various Wayland fixes. New NSS version 3.60. FEDORA-2021-48ff299b05 Note that Nessus has not tested for this issue but has...

java-1.8.0-openjdk bug fix and enhancement update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Bug Fixes and Enhancements: Currently, Java applications run with Speculative Store Bypass SSB, CVE-2018-3639 disabled. Disabling SSB results in a performance degradatio...

Security Bulletin: IBM MQ Appliance is affected by multiple nss and nspr vulnerabilities

Summary IBM MQ Appliance has resolved multiple nss and nspr vulnerabilities. Vulnerability Details CVEID: CVE-2019-11719 DESCRIPTION: Mozilla Firefox could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when importing a curve25519 private key in...

EulerOS 2.0 SP3 : nss (EulerOS-SA-2021-1102)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2021-1102)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed multiple issue for NSS and NSPR as follows. Vulnerability Details CVEID: CVE-2019-17006 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox is vulnerable to a heap-based buffer overflow, caused by improper...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2021-1011)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for nss (EulerOS-SA-2021-1030)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : nss (EulerOS-SA-2021-1030)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the...

EulerOS 2.0 SP9 : nss (EulerOS-SA-2021-1011)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the...

Denial Of Service (DoS)

nss is vulnerable to denial of service DoS. The vulnerability exists through a malformed netscape certificate sequence,...

Virtuozzo 6 : nss-softokn / nss-softokn-devel / etc (VZLSA-2019-4152)

An update for nss-softokn is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Fedora 32 : firefox (2020-0e26e95566)

Update to Firefox 84 - Built with system nss Please give karma to nss packages which are needed for this update : https://bodhi.fedoraproject.org/updates/FEDORA-2020-c489b93b18 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d04a8e97b3 ---- - New upstream version Firefox 84 - Enabled...