RHSA-2021:4953: Critical: nss security update
Published Dec 6, 2021
·Updated
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.<br>Security Fix(es):<br><li> nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS) (CVE-2021-43527)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
68 affected componentsFixes available
redhat/nss<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-debugsource<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-debugsource<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-sysinit<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-sysinit-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-sysinit-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-tools<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-tools-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-tools-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-sysinit<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-tools<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-debugsource<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-softokn-freebl-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-sysinit<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-sysinit-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-tools<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-tools-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util-debuginfo<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss-util-devel<3.44.0-10.el8_1
3.44.0-10.el8_1
redhat/nss<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-debuginfo<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-debugsource<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-devel<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-softokn<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-softokn-debuginfo<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-softokn-devel<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-softokn-freebl<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-softokn-freebl-debuginfo<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-softokn-freebl-devel<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-sysinit<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-sysinit-debuginfo<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-tools<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-tools-debuginfo<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-util<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-util-debuginfo<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
redhat/nss-util-devel<3.44.0-10.el8_1.aa
3.44.0-10.el8_1.aa
Remediation
Event History
Jun 20, 2024
Advisory Published
via Red Hat·01:35 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:4953?
The severity of RHSA-2021:4953 is classified as moderate.
2
How do I fix RHSA-2021:4953?
You can fix RHSA-2021:4953 by updating the affected packages to version 3.44.0-10.el8_1.
3
Which software is affected by RHSA-2021:4953?
RHSA-2021:4953 affects various packages including nss, nss-devel, and nss-util among others.
4
What types of vulnerabilities are addressed in RHSA-2021:4953?
RHSA-2021:4953 addresses memory corruption vulnerabilities in Network Security Services.
5
Is there a workaround for RHSA-2021:4953?
There are no specific workarounds for RHSA-2021:4953; updating to the fixed version is recommended.