RHSA-2020:0243: Important: nss security update
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.<br>Security Fix(es):<br><li> nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSCEncryptUpdate (CVE-2019-11745)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0243?
The severity of RHSA-2020:0243 is classified as moderate.
How do I fix RHSA-2020:0243?
To fix RHSA-2020:0243, update the affected nss package to version 3.44.0-8.el8_0 or later.
Which systems are affected by RHSA-2020:0243?
RHSA-2020:0243 affects systems using the nss library, including various architectures such as x86_64 and ppc64le.
What kind of vulnerability is addressed in RHSA-2020:0243?
RHSA-2020:0243 addresses an out-of-bounds write vulnerability when passing an output buffer smaller than the block size to NSC_Encrypt.
Is RHSA-2020:0243 applicable to production environments?
Yes, RHSA-2020:0243 should be addressed in production environments to mitigate potential security risks.