RHSA-2021:4903: Critical: nss security update
Published Dec 1, 2021
·Updated
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.Security Fix(es): nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS) (CVE-2021-43527) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
68 affected componentsFixes available
redhat/nss<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-debugsource<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-debugsource<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-sysinit<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-sysinit-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-sysinit-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-tools<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-tools-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-tools-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-sysinit<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-tools<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-debugsource<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-softokn-freebl-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-sysinit<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-sysinit-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-tools<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-tools-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util-debuginfo<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss-util-devel<3.67.0-7.el8_5
3.67.0-7.el8_5
redhat/nss<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-debuginfo<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-debugsource<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-devel<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-softokn<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-softokn-debuginfo<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-softokn-devel<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-softokn-freebl<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-softokn-freebl-debuginfo<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-softokn-freebl-devel<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-sysinit<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-sysinit-debuginfo<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-tools<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-tools-debuginfo<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-util<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-util-debuginfo<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
redhat/nss-util-devel<3.67.0-7.el8_5.aa
3.67.0-7.el8_5.aa
Remediation
Event History
Apr 5, 2024
Advisory Published
via Red Hat·01:09 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:4903?
The severity of RHSA-2021:4903 is classified as important.
2
How do I fix RHSA-2021:4903?
To fix RHSA-2021:4903, upgrade the NSS package to version 3.67.0-7.el8_5 or later.
3
What vulnerability does RHSA-2021:4903 address?
RHSA-2021:4903 addresses a memory corruption vulnerability in the Network Security Services library.
4
What systems are affected by RHSA-2021:4903?
RHSA-2021:4903 affects systems using the NSS library versions prior to 3.67.0-7.el8_5.
5
Is there a need for a reboot after applying RHSA-2021:4903?
A reboot may be necessary after applying RHSA-2021:4903 to ensure that all services are using the updated library.