RHSA-2024:0105: Moderate: nss security update
Published Jan 10, 2024
·Updated
Moderate: nss security update
Other sources
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.Security Fix(es): nss: timing attack against RSA decryption (CVE-2023-5388) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
71 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
redhat/nss<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-debugsource<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-debugsource<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-sysinit<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-sysinit-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-sysinit-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-tools<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-tools-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-tools-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-sysinit<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-tools<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-debugsource<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-softokn-freebl-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-sysinit<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-sysinit-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-tools<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-tools-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util-debuginfo<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss-util-devel<3.90.0-4.el8_9
3.90.0-4.el8_9
redhat/nss<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-debuginfo<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-debugsource<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-devel<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-softokn<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-softokn-debuginfo<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-softokn-devel<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-softokn-freebl<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-softokn-freebl-devel<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-sysinit<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-sysinit-debuginfo<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-tools<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-tools-debuginfo<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-util<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-util-debuginfo<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
redhat/nss-util-devel<3.90.0-4.el8_9.aa
3.90.0-4.el8_9.aa
Remediation
Event History
Jan 10, 2024
Advisory Published
via Red Hat·08:00 AM
Apr 5, 2025
Advisory Published
via Red Hat·06:59 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0105?
The severity of RHSA-2024:0105 is classified as Moderate.
2
How do I fix RHSA-2024:0105?
To fix RHSA-2024:0105, update the affected packages to version 3.90.0-4.el8_9.
3
Which software is affected by RHSA-2024:0105?
RHSA-2024:0105 affects multiple versions of Red Hat Enterprise Linux including x86_64, ARM 64, and Power, little endian.
4
What packages are concerned in RHSA-2024:0105?
The packages concerned in RHSA-2024:0105 include nss, nss-debuginfo, nss-softokn, and several related development and debug packages.
5
How can I check if I am vulnerable to RHSA-2024:0105?
To determine if you are vulnerable to RHSA-2024:0105, verify whether you are running any of the affected nss packages below version 3.90.0-4.el8_9.