Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-0786

Опубликовано: 13 фев. 2024
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2024-0786: nss security update (MODERATE)

[3.90.0-6]

  • Fix ecc DER wrapping.

[3.90.0-5]

  • Pick up validated constant time implementations of p256, p384, and p521 from upsream
  • More Fips indicator changes

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

nss

3.90.0-6.el8_9

nss-devel

3.90.0-6.el8_9

nss-softokn

3.90.0-6.el8_9

nss-softokn-devel

3.90.0-6.el8_9

nss-softokn-freebl

3.90.0-6.el8_9

nss-softokn-freebl-devel

3.90.0-6.el8_9

nss-sysinit

3.90.0-6.el8_9

nss-tools

3.90.0-6.el8_9

nss-util

3.90.0-6.el8_9

nss-util-devel

3.90.0-6.el8_9

Oracle Linux x86_64

nss

3.90.0-6.el8_9

nss-devel

3.90.0-6.el8_9

nss-softokn

3.90.0-6.el8_9

nss-softokn-devel

3.90.0-6.el8_9

nss-softokn-freebl

3.90.0-6.el8_9

nss-softokn-freebl-devel

3.90.0-6.el8_9

nss-sysinit

3.90.0-6.el8_9

nss-tools

3.90.0-6.el8_9

nss-util

3.90.0-6.el8_9

nss-util-devel

3.90.0-6.el8_9

Связанные CVE

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

CVSS3: 4.3
redhat
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

CVSS3: 4.3
nvd
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

CVSS3: 4.3
debian
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack kno ...

rocky
больше 1 года назад

Moderate: nss security update