RHSA-2021:4919: Critical: nss security update
Published Dec 2, 2021
·Updated
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.<br>Security Fix(es):<br><li> nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS) (CVE-2021-43527)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
68 affected componentsFixes available
redhat/nss<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-debugsource<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-debugsource<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-sysinit<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-sysinit-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-sysinit-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-tools<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-tools-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-tools-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-sysinit<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-tools<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-debugsource<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-softokn-freebl-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-sysinit<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-sysinit-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-tools<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-tools-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util-debuginfo<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss-util-devel<3.53.1-12.el8_2
3.53.1-12.el8_2
redhat/nss<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-debuginfo<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-debugsource<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-devel<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-softokn<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-softokn-debuginfo<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-softokn-devel<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-softokn-freebl<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-softokn-freebl-debuginfo<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-softokn-freebl-devel<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-sysinit<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-sysinit-debuginfo<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-tools<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-tools-debuginfo<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-util<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-util-debuginfo<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
redhat/nss-util-devel<3.53.1-12.el8_2.aa
3.53.1-12.el8_2.aa
Remediation
Event History
Aug 31, 2024
Advisory Published
via Red Hat·02:14 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:4919?
The severity of RHSA-2021:4919 is classified as important.
2
How do I fix RHSA-2021:4919?
To fix RHSA-2021:4919, update the affected NSS package to version 3.53.1-12.el8_2.
3
What is the impact of RHSA-2021:4919?
The impact of RHSA-2021:4919 includes potential memory corruption when processing DSA signatures and RSA-PSS.
4
What affected systems are associated with RHSA-2021:4919?
Affected systems include Red Hat Enterprise Linux 8, specifically the NSS library and its related packages.
5
Is there a workaround for RHSA-2021:4919 before applying the fix?
There is no official workaround for RHSA-2021:4919; applying the recommended update is the best course of action.