Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-0790

Опубликовано: 13 фев. 2024
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2024-0790: nss security update (MODERATE)

[3.90.0-6]

  • Fix ecc DER wrapping.

[3.90.0-5]

  • Pick up validated constant time implementations of p256, p384, and p521 from upsream
  • More Fips indicator changes

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

nspr

4.35.0-6.el9_3

nspr-devel

4.35.0-6.el9_3

nss

3.90.0-6.el9_3

nss-devel

3.90.0-6.el9_3

nss-softokn

3.90.0-6.el9_3

nss-softokn-devel

3.90.0-6.el9_3

nss-softokn-freebl

3.90.0-6.el9_3

nss-softokn-freebl-devel

3.90.0-6.el9_3

nss-sysinit

3.90.0-6.el9_3

nss-tools

3.90.0-6.el9_3

nss-util

3.90.0-6.el9_3

nss-util-devel

3.90.0-6.el9_3

Oracle Linux x86_64

nspr

4.35.0-6.el9_3

nspr-devel

4.35.0-6.el9_3

nss

3.90.0-6.el9_3

nss-devel

3.90.0-6.el9_3

nss-softokn

3.90.0-6.el9_3

nss-softokn-devel

3.90.0-6.el9_3

nss-softokn-freebl

3.90.0-6.el9_3

nss-softokn-freebl-devel

3.90.0-6.el9_3

nss-sysinit

3.90.0-6.el9_3

nss-tools

3.90.0-6.el9_3

nss-util

3.90.0-6.el9_3

nss-util-devel

3.90.0-6.el9_3

Связанные CVE

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

CVSS3: 4.3
redhat
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

CVSS3: 4.3
nvd
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

CVSS3: 4.3
debian
больше 1 года назад

Multiple NSS NIST curves were susceptible to a side-channel attack kno ...

rocky
больше 1 года назад

Moderate: nss security update

Уязвимость ELSA-2024-0790