RHSA-2021:4933: Critical: nss security update
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.<br>Security Fix(es):<br><li> nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS) (CVE-2021-43527)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:4933?
The severity of RHSA-2021:4933 is classified as important.
How do I fix RHSA-2021:4933?
To fix RHSA-2021:4933, you should update to the fixed packages available in the remedy version 3.36.0-10.2.el7_6.
What systems are affected by RHSA-2021:4933?
RHSA-2021:4933 affects various versions of the Network Security Services (NSS) library on Red Hat systems.
What are the risks associated with CVE-2021-43527 in RHSA-2021:4933?
CVE-2021-43527 presents a risk of memory corruption that could potentially lead to crashes or execution of arbitrary code.
Is there a specific version of NSS I need to update to for RHSA-2021:4933?
Yes, you need to update to Network Security Services version 3.36.0-10.2.el7_6 to mitigate the vulnerabilities.