CentOS Linux 7 [TuxCare] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-sysinit / nss-tools (CENTOS7:CLSA-2026:1786532297)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1786532297 advisory. - An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox 122,...

Rocky Linux 8 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / nss-softokn / etc (crlsa-2024_0105)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240105 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel / nss / nss-debuginfo / etc (crlsa-2023_1368)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231368 advisory. nss: Arbitrary memory write via PKCS 12 CVE-2023-0767 Bug Fixes: In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash...

Rocky Linux 8.8 [CIQ] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-softokn / etc (ciqsa-2026_0339)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260339 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-5388. Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: cifs-utils / cifs-utils-devel / cifs-utils-info / pam_cifscreds (ALMALINUX9.6:CLSA-2026:1784560784)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784560784 advisory. - A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_19348)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619348 advisory. firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS CVE-2026-6772 firefox: thunderbird: Use-after-free in the JavaScript...

AlmaLinux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.6:CLSA-2026:1787733592)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787733592 advisory. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaini...

Rocky Linux 8 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-debugsource / nspr-devel / nss / etc (crlsa-2021_3572)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213572 advisory. nss: TLS 1.3 CCS flood remote DoS Attack CVE-2020-25648 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2025:1756961235)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756961235 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to...

CentOS Linux 7 [TuxCare] Security Update: nss-softokn / nss-softokn-devel / nss-softokn-freebl / etc (CENTOS7:CLSA-2025:1739975489)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1739975489 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover...

OESA-2026-4137 jss security update

Java Security Services JSS is a java native interface which provides a bridge for java-based applications to use native Network Security Services NSS. This only works with gcj. Other JREs require that JCE providers be signed. Security Fixes: A flaw was found in JSS Java Security Services. The...

OESA-2026-4136 jss security update

Java Security Services JSS is a java native interface which provides a bridge for java-based applications to use native Network Security Services NSS. This only works with gcj. Other JREs require that JCE providers be signed. Security Fixes: A flaw was found in JSS Java Security Services. The...

OESA-2026-4134 jss security update

Java Security Services JSS is a java native interface which provides a bridge for java-based applications to use native Network Security Services NSS. This only works with gcj. Other JREs require that JCE providers be signed. Security Fixes: A flaw was found in JSS Java Security Services. The...

AlmaLinux 9.2 [TuxCare] Security Update: cifs-utils / cifs-utils-devel / cifs-utils-info / pam_cifscreds (ALMALINUX9.2:CLSA-2026:1784818499)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784818499 advisory. - A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user...

AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2026:1785841535)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785841535 advisory. - An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox 122,...

AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2024:1722977316)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1722977316 advisory. - Multiple NSS NIST curves were susceptible to a side-channel attack known as Minerva. This attack could potentially allow an attacker to...

CentOS Linux 6 [TuxCare] Security Update: nss / nss-devel / nss-pkcs11-devel / nss-sysinit / nss-tools (CENTOS6:CLSA-2025:1760112150)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1760112150 advisory. - A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo特権昇格 sudoにおける特権昇格の脆弱性が、Linux/Unix系システムに影響を与えます。この欠陥は、sudoが-R（--chroot）オプションと共に使用された際の不適切なパス検証 に起因し、攻撃者が悪意のあるNSSライブラリのロードを介してrootに昇格することを可能にします。 根本原因 sudoがchroot環境 （-Rオプション）内でコマンドを実行する際、エラー状態でのNSS Name Service Switch ライブラリの読み込み を誤って処理します。...

OESA-2026-4103 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

thunderbird security update

140.16.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.16.0 - Add OpenELA debranding 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR...