Amazon Linux 2 : nspr, nss-softokn, nss-util, nss (ALAS-2020-1559)

The version of nspr installed on the remote host is prior to 4.25.0-2. The version of nss installed on the remote host is prior to 3.53.1-3. The version of nss-softokn installed on the remote host is prior to 3.53.1-6. The version of nss- util installed on the remote host is prior to 3.53.1-1. It...

Medium: nspr, nss-softokn, nss-util, nss

Issue Overview: When importing a curve25519 private key in PKCS8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services NSS library. This could lead to information disclosure. This vulnerability affects Firefox ESR 60.8, Firefox 68, and...

nspr, nss security update

CentOS Errata and Security Advisory CESA-2020:4076 An update for nss, nss-softokn, nss-util, and nspr is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whi...

CentOS 7 : nss and nspr (RHSA-2020:4076)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4076 advisory. - When importing a curve25519 private key in PKCS8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Securi...

openSUSE Security Update : MozillaThunderbird and mozilla-nspr (openSUSE-2020-1780)

This update for MozillaThunderbird and mozilla-nspr fixes the following issues : - Mozilla Thunderbird 78.4 - new: MailExtensions: browser.tabs.sendMessage API added - new: MailExtensions: messageDisplayScripts API added - changed: Yahoo and AOL mail users using password authentication will be...

openSUSE Security Update : MozillaThunderbird and mozilla-nspr (openSUSE-2020-1785)

This update for MozillaThunderbird and mozilla-nspr fixes the following issues : - Mozilla Thunderbird 78.4 - new: MailExtensions: browser.tabs.sendMessage API added - new: MailExtensions: messageDisplayScripts API added - changed: Yahoo and AOL mail users using password authentication will be...

Security update for MozillaThunderbird and mozilla-nspr (important)

openSUSE Security Update: Security update for MozillaThunderbird and mozilla-nspr Announcement ID: openSUSE-SU-2020:1780-1 Rating: important References: 1174230 1176384 1176756 1176899 1177977 Cross-References: CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678 CVE-2020-15683...

Security update for MozillaThunderbird and mozilla-nspr (important)

openSUSE Security Update: Security update for MozillaThunderbird and mozilla-nspr Announcement ID: openSUSE-SU-2020:1785-1 Rating: important References: 1174230 1176384 1176756 1176899 1177977 Cross-References: CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678 CVE-2020-15683...

Scientific Linux Security Update : nss and nspr on SL7.x x86_64 (20201001)

Security Fixes : - nss: Out-of-bounds read when importing curve25519 private key CVE-2019-11719 - nss: Use-after-free in sftkFreeSession due to improper refcounting CVE-2019-11756 - nss: Check length of inputs for cryptographic primitives CVE-2019-17006 - nss: Side channel attack on ECDSA signatu...

Oracle Linux 7 : nss / and / nspr (ELSA-2020-4076)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4076 advisory. - include patches for CVE-2020-6829, CVE-2020-12400, and CVE-2020-12401 from upstream ECC constant time issues. - include patches for CVE-2020-12403 fr...

nss and nspr security, bug fix, and enhancement update

nspr 4.25.0-2 - Rebuild to fix wrong dist tag 4.25.0-1 - Rebase to NSPR 4.25 nss 3.53.1-3 - Disable dh timing test because it's unreliable on s390 from Bob Relyea - Explicitly enable upgradedb/sharedb test cycles 3.53.1-2 - Disable TLS 1.3 by default 3.53.1-1 - Rebase to NSS 3.53.1 3.44.0-8 -...

RHEL 7 : nss and nspr (RHSA-2020:4076)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4076 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

Oracle Linux 8 : nss / and / nspr (ELSA-2020-3280)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3280 advisory. nspr 4.25.0-2 - Rebuild 4.25.0-1 - Update to NSPR 4.25 nss 3.53.1-11 - Fix issue with upgradedb where upgradedb expects standard to generate dbm...

nss and nspr security, bug fix, and enhancement update

nspr 4.25.0-2 - Rebuild 4.25.0-1 - Update to NSPR 4.25 nss 3.53.1-11 - Fix issue with upgradedb where upgradedb expects standard to generate dbm databases, not sql databases default in RHEL8 3.53.1-10 - Disable dh timing test because it's unreliable on s390 3.53.1-9 - Explicitly enable...

Moderate: nss and nspr security, bug fix, and enhancement update

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. The following packages have been upgrad...

nss and nspr security, bug fix, and enhancement update

An update is available for nspr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...

RHEL 8 : nss and nspr (RHSA-2020:3280)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3280 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

Fedora: Security Advisory for nspr (FEDORA-2020-16741ac7ff)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: nspr-4.26.0-1.fc31

NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...

openSUSE Security Update : mozilla-nspr / mozilla-nss (openSUSE-2020-854)

This update for mozilla-nspr, mozilla-nss fixes the following issues : mozilla-nss was updated to version 3.53 - CVE-2020-12399: Fixed a timing attack on DSA signature generation bsc1171978. - CVE-2019-17006: Added length checks for cryptographic primitives bsc1159819. Release notes:...