Package nss updated to version 3.72-alt1.p9.1 for branch p9 in task 288073.

Published: 2020-10-20

BDU:2021-05184

Уязвимость пакета библиотек для сетевой защиты приложений NSS, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2020-25648

Published: 2020-10-21
Modified: 2024-11-21

CVE-2020-25648

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

python3-module-nss FTBFS on ppc64le

nss-utils и conflict конфликтуют по файлу /usr/bin/conflict

Version: 2.1.0

Package nss update in p9 on 2022-04-28

ALT-PU-2022-1779-1

Closed vulnerabilities

BDU:2021-05184

CVE-2020-25648

Closed bugs

Bug #40510

Bug #41317