RHSA-2024:0107: Moderate: nss security update
Published Jan 10, 2024
·Updated
Moderate: nss security update
Other sources
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.Security Fix(es): nss: timing attack against RSA decryption (CVE-2023-5388) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
86 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
redhat/nss<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nspr<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr-debuginfo<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr-debuginfo<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr-devel<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr-devel<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nss<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-debugsource<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-debugsource<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-sysinit<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-sysinit-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-sysinit-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-tools<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-tools-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-tools-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-sysinit<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-tools<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nspr<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr-debuginfo<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nspr-devel<4.35.0-4.el9_2
4.35.0-4.el9_2
redhat/nss<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-debugsource<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-softokn-freebl-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-sysinit<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-sysinit-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-tools<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-tools-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util-debuginfo<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nss-util-devel<3.90.0-4.el9_2
3.90.0-4.el9_2
redhat/nspr<4.35.0-4.el9_2.aa
4.35.0-4.el9_2.aa
redhat/nspr-debuginfo<4.35.0-4.el9_2.aa
4.35.0-4.el9_2.aa
redhat/nspr-devel<4.35.0-4.el9_2.aa
4.35.0-4.el9_2.aa
redhat/nss<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-debuginfo<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-debugsource<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-devel<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-softokn<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-softokn-debuginfo<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-softokn-devel<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-softokn-freebl<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-softokn-freebl-debuginfo<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-softokn-freebl-devel<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-sysinit<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-sysinit-debuginfo<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-tools<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-tools-debuginfo<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-util<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-util-debuginfo<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
redhat/nss-util-devel<3.90.0-4.el9_2.aa
3.90.0-4.el9_2.aa
Remediation
Event History
Jan 10, 2024
Advisory Published
via Red Hat·08:03 AM
Apr 5, 2025
Advisory Published
via Red Hat·06:59 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:0107?
The severity of RHSA-2024:0107 is classified as moderate.
2
How do I fix RHSA-2024:0107?
To fix RHSA-2024:0107, you must update your nss package to version 3.90.0-4.el9_2 and nspr package to version 4.35.0-4.el9_2.
3
Which systems are affected by RHSA-2024:0107?
Affected systems include Red Hat Enterprise Linux for Power, ARM 64 and x86_64 platforms.
4
What packages are involved in the RHSA-2024:0107 update?
The key packages involved in the RHSA-2024:0107 update are nss and nspr.
5
Is there a workaround for RHSA-2024:0107?
There are no recommended workarounds; the only solution is to apply the available updates.