Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat 7.4: RHSA-2021-0758 Moderate: NSS-Softokn Security Update

An update for nss-softokn is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: nss-softokn security update Advisory ID: RHSA-2021:0758-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0758 Issue date: 2021-03-09 CVE Names: CVE-2019-11756 CVE-2019-17006 CVE-2020-12403 ==================================================================== 1. Summary: An update for nss-softokn is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server E4S (v. 7.4) - ppc64le, x86_64 Red Hat Enterprise Linux Server TUS (v. 7.4) - x86_64 3. Description: The nss-softokn package provides the Network Security Services Softoken Cryptographic Module. Security Fix(es): * nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756) * nss: Check length of inputs for cryptographic primitives (CVE-2019-17006) * nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listedin the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1774835 - CVE-2019-11756 nss: Use-after-free in sftk_FreeSession due to improper refcounting 1775916 - CVE-2019-17006 nss: Check length of inputs for cryptographic primitives 1868931 - CVE-2020-12403 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.4): Source: nss-softokn-3.28.3-10.el7_4.src.rpm x86_64: nss-softokn-3.28.3-10.el7_4.i686.rpm nss-softokn-3.28.3-10.el7_4.x86_64.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.i686.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.x86_64.rpm nss-softokn-devel-3.28.3-10.el7_4.i686.rpm nss-softokn-devel-3.28.3-10.el7_4.x86_64.rpm nss-softokn-freebl-3.28.3-10.el7_4.i686.rpm nss-softokn-freebl-3.28.3-10.el7_4.x86_64.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.i686.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.x86_64.rpm Red Hat Enterprise Linux Server E4S (v. 7.4): Source: nss-softokn-3.28.3-10.el7_4.src.rpm ppc64le: nss-softokn-3.28.3-10.el7_4.ppc64le.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.ppc64le.rpm nss-softokn-devel-3.28.3-10.el7_4.ppc64le.rpm nss-softokn-freebl-3.28.3-10.el7_4.ppc64le.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.ppc64le.rpm x86_64: nss-softokn-3.28.3-10.el7_4.i686.rpm nss-softokn-3.28.3-10.el7_4.x86_64.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.i686.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.x86_64.rpm nss-softokn-devel-3.28.3-10.el7_4.i686.rpm nss-softokn-devel-3.28.3-10.el7_4.x86_64.rpm nss-softokn-freebl-3.28.3-10.el7_4.i686.rpm nss-softokn-freebl-3.28.3-10.el7_4.x86_64.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.i686.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.x86_64.rpm Red Hat Enterprise Linux Server TUS (v.7.4): Source: nss-softokn-3.28.3-10.el7_4.src.rpm x86_64: nss-softokn-3.28.3-10.el7_4.i686.rpm nss-softokn-3.28.3-10.el7_4.x86_64.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.i686.rpm nss-softokn-debuginfo-3.28.3-10.el7_4.x86_64.rpm nss-softokn-devel-3.28.3-10.el7_4.i686.rpm nss-softokn-devel-3.28.3-10.el7_4.x86_64.rpm nss-softokn-freebl-3.28.3-10.el7_4.i686.rpm nss-softokn-freebl-3.28.3-10.el7_4.x86_64.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.i686.rpm nss-softokn-freebl-devel-3.28.3-10.el7_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-11756 https://access.redhat.com/security/cve/CVE-2019-17006 https://access.redhat.com/security/cve/CVE-2020-12403 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYEc+RNzjgjWX9erEAQg4mQ/+MCpmmYSEI6SYvndSaGpNdO8n7hGXNjAM VmFgQ8T3HABcaoKX78x2lhSeFZypFdwLDac2fL7pOoxxY9KZKUJqDCZc1Q6UggmQ CWUgRNzngnZhkwGaZw3al+/371NN/dfj7kAkEuQTt/PSH0gdiyAdwYthZ0Ke+EOV wIW+8w1x2NxJFrTWIvBSP+w3HHn0d2dCRJicemPkPd25ptHsDzwer2ySDuRI7HJI OlVt5mop/Yq0xXEWlujB7qUhD3gH4ebwHHIgtce7Ffwi1Y/JBGeV9/V2xMbhCNBk 4jhK3AWRNw9ByI0vH4EfyxAuRlolUGR3T/z2ApemyV6pfrulr2KuWeKzF5AEEe1F 9VPuhZ2L+b1xlU3dkZWBO7KH97/c8FJDH2A6j6Lz+M4OtlDziFAPUkabo83AKSSq kv7K2LRL/rm2+dJbSRu9G/3H61jtwVLuGxWUfH6+f8j+NjIeY2BsPFGmCJRGMavI 37MpSDMeYcikHrxgcd49N/xYGNtJKuSQnaO2mQRM5KK7yfeZ8qKOprmC7nE5RKp7 zlIKxq3Py1S53zIzuXzyT5PnvM2nwI3EpBGrcQiiBLlRH7EBAW6eWUCcIQaZklW9 llkYRNyJ+qct5YItP7SjRMUyEJ6Zfn1fxNiJ3vGA4s1dsrBF097H+sqr/OuTEXM8 FTKK9cP2NpU=9QSj -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://listman.redhat.com/mailman/listinfo/rhsa-announce . Uncover the recent security patchconcerning nss-softokn that impacts Red Hat Enterprise Linux, classified at Moderate for potential security ramifications.. NSS-Softokn Update, Red Hat Security Advisory, Moderate Security Impact. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 09, 2021 Important Red Hat
89

Fedora: 2015-fb3360fc0a Critical: Nss-Softokn Firefox Fix

firefox-42.0-2.fc22 - Update to 42.0 firefox-42.0-2.fc21 - Update to 42.0 firefox-42.0-2.fc23 - Update to 42.0 nspr-4.10.10-1.fc23 - Update to NSPR_4_10_10_RTM nspr-4.10.10-1.fc21 - Update to NSPR_4_10_10_RTM nspr-4.10.10-1.fc22 - Update to NSPR_4_10_10_RTM ---- firefox-41.0.2-2.fc21 - Update to 41.0.2 firefox-41.0.2-2.fc22 - Update to. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-fb3360fc0a 2015-11-09 20:14:23.880855 -------------------------------------------------------------------------------- Name : nss-softokn Product : Fedora 21 Version : 3.20.1 Release : 1.0.fc21 URL : https://firefox-source-docs.mozilla.org/security/nss/index.html Summary : Network Security Services Softoken Module Description : Network Security Services Softoken Cryptographic Module -------------------------------------------------------------------------------- Update Information: firefox-42.0-2.fc22 - Update to 42.0 firefox-42.0-2.fc21 - Update to 42.0 firefox-42.0-2.fc23 - Update to 42.0 nspr-4.10.10-1.fc23 - Update to NSPR_4_10_10_RTM nspr-4.10.10-1.fc21 - Update to NSPR_4_10_10_RTM nspr-4.10.10-1.fc22 - Update to NSPR_4_10_10_RTM ---- firefox-41.0.2-2.fc21 - Update to 41.0.2 firefox-41.0.2-2.fc22 - Update to 41.0.2 firefox-41.0.2-2.fc23 - Update to 41.0.2 ---- firefox-41.0-6.fc21 - Rebuilt for old sqlite which is available in updates firefox-41.0-6.fc22 - Rebuilt for old sqlite which is available in updates firefox-41.0-6.fc23 - Rebuilt for old sqlite which is available in updates ---- firefox-41.0-4.fc21 - New upstream 41.0 firefox-41.0-4.fc22 - New upstream 41.0 firefox-41.0-4.fc23 - New upstream 41.0 ---- nss-3.20.0-1.1.1.fc21 - Enable ECC cipher-suites by default [hrbz#1185708] - Split the enabling patch in two for easier maintenance -------------------------------------------------------------------------------- This update can be installed with the "yum" updateprogram. Use su -c 'yum update nss-softokn' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Important nss-softokn patch released for Fedora 21 to fix Firefox security risks and enhance cryptographic features.. NSS Softoken Update,Fedora Firefox Security,NSS Crypto Fixes,Fedora System Updates. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 10, 2015 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here