RHSA-2023:1369: Important: nss security update
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.Security Fix(es): nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/nssto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-debugsourceto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-softoknto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-softokn-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-softokn-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-softokn-freeblto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-softokn-freebl-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-softokn-freebl-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-sysinitto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-sysinit-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-toolsto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-tools-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-utilto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-util-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nss-util-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6 - Upgrade
Upgrade
redhat/nssto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-debugsourceto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-softoknto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-softokn-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-softokn-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-softokn-freeblto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-softokn-freebl-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-softokn-freebl-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-sysinitto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-sysinit-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-toolsto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-tools-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-utilto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-util-debuginfoto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Upgrade
Upgrade
redhat/nss-util-develto a version that resolves this vulnerability.Fixed in 3.79.0-11.el8_6.aa - Operational
After installing the NSS security update, restart applications using NSS (for example, Firefox) so the update takes effect.
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1369?
The severity of RHSA-2023:1369 is classified as important.
What vulnerability does RHSA-2023:1369 address?
RHSA-2023:1369 addresses an arbitrary memory write vulnerability via PKCS 12 (CVE-2023-0767).
How do I fix RHSA-2023:1369?
To fix RHSA-2023:1369, you need to update the affected NSS package to version 3.79.0-11.el8_6.
What packages are affected by RHSA-2023:1369?
Affected packages include nss, nss-tools, nss-util, and their respective debug and development packages.
Is there any workaround for RHSA-2023:1369?
There are no reliable workarounds for the vulnerabilities addressed by RHSA-2023:1369 and the best course of action is to apply the security update.