RHSA-2021:0538
Vulnerability from csaf_redhat - Published: 2021-02-16 14:33 - Updated: 2025-11-21 18:20Summary
Red Hat Security Advisory: nss security and bug fix update
Severity
Moderate
Notes
Topic: An update for nss is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.
Security Fix(es):
* nss: Side channel attack on ECDSA signature generation (CVE-2020-6829)
* nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function (CVE-2020-12400)
* nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Support key wrap/unwrap with RSA-OAEP (BZ#1896431)
* 1536bit group from RFC3526 is allowed in FIPS mode when in policy DH-MIN is set to be lower than 1536 (BZ#1896432)
* when NSS_SDB_USE_CACHE not set, after curl access https, dentry increase but never released - consider alternative algorithm for benchmarking ACCESS call in sdb_measureAccess [rhel-8] (BZ#1896933)
* Policy should allow overriding library defaults (BZ#1898702)
* KDF-self-tests-induced changes for nss in RHEL 8.4 (BZ#1898953)
* nss: non-blocksize requests to IKEv1 KDF returns bogus output (BZ#1904408)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.
4.4 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.
4.4 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.
4.4 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.
7.4 (High)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
27 references
Acknowledgments
the Mozilla Project
Network and Information Security Group (NISEC
Cesar Pereida
Nicola Tuveri
Yuval Yarom
Billy Bob Brumley
NISEC
Cesar Pereida Garcia and the Network and Information Security Group
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for nss is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.\n\nSecurity Fix(es):\n\n* nss: Side channel attack on ECDSA signature generation (CVE-2020-6829)\n\n* nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function (CVE-2020-12400)\n\n* nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Support key wrap/unwrap with RSA-OAEP (BZ#1896431)\n\n* 1536bit group from RFC3526 is allowed in FIPS mode when in policy DH-MIN is set to be lower than 1536 (BZ#1896432)\n\n* when NSS_SDB_USE_CACHE not set, after curl access https, dentry increase but never released - consider alternative algorithm for benchmarking ACCESS call in sdb_measureAccess [rhel-8] (BZ#1896933)\n\n* Policy should allow overriding library defaults (BZ#1898702)\n\n* KDF-self-tests-induced changes for nss in RHEL 8.4 (BZ#1898953)\n\n* nss: non-blocksize requests to IKEv1 KDF returns bogus output (BZ#1904408)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:0538",
"url": "https://access.redhat.com/errata/RHSA-2021:0538"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1826187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187"
},
{
"category": "external",
"summary": "1853983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983"
},
{
"category": "external",
"summary": "1868931",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931"
},
{
"category": "external",
"summary": "1896431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1896431"
},
{
"category": "external",
"summary": "1896432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1896432"
},
{
"category": "external",
"summary": "1896933",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1896933"
},
{
"category": "external",
"summary": "1898953",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1898953"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0538.json"
}
],
"title": "Red Hat Security Advisory: nss security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T18:20:22+00:00",
"generator": {
"date": "2025-11-21T18:20:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2021:0538",
"initial_release_date": "2021-02-16T14:33:11+00:00",
"revision_history": [
{
"date": "2021-02-16T14:33:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-02-16T14:33:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:20:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.53.1-17.el8_3.src",
"product": {
"name": "nss-0:3.53.1-17.el8_3.src",
"product_id": "nss-0:3.53.1-17.el8_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.53.1-17.el8_3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-devel-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-devel-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-softokn-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-softokn-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-tools-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-tools-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-util-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-util-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-17.el8_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_id": "nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-17.el8_3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-devel-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-devel-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-tools-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-tools-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-util-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-util-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-17.el8_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_id": "nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-17.el8_3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-0:3.53.1-17.el8_3.i686",
"product_id": "nss-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-devel-0:3.53.1-17.el8_3.i686",
"product_id": "nss-devel-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-softokn-0:3.53.1-17.el8_3.i686",
"product_id": "nss-softokn-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"product_id": "nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"product_id": "nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"product_id": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-util-0:3.53.1-17.el8_3.i686",
"product_id": "nss-util-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.i686",
"product_id": "nss-util-devel-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.i686",
"product_id": "nss-debugsource-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.i686",
"product_id": "nss-debuginfo-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"product_id": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"product_id": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"product_id": "nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-17.el8_3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"product": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"product_id": "nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-17.el8_3?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-devel-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-devel-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-softokn-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-softokn-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-tools-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-tools-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-util-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-util-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-util-devel-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-17.el8_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_id": "nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-17.el8_3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nss-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-devel-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-devel-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-devel-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-devel@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-softokn-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-softokn-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-sysinit-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-tools-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-tools-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-util-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-util-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-util-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-util-devel-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-util-devel-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debugsource-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-debugsource-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-17.el8_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"product": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_id": "nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-17.el8_3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.53.1-17.el8_3.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src"
},
"product_reference": "nss-0:3.53.1-17.el8_3.src",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-debuginfo-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debuginfo-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-debugsource-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-debugsource-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-debugsource-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-devel-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-devel-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-devel-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-devel-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-devel-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-devel-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-softokn-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-softokn-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-softokn-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-softokn-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-devel-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-sysinit-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-tools-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-tools-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-tools-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-tools-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-util-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-util-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-util-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-util-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-util-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64"
},
"product_reference": "nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686"
},
"product_reference": "nss-util-devel-0:3.53.1-17.el8_3.i686",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le"
},
"product_reference": "nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x"
},
"product_reference": "nss-util-devel-0:3.53.1-17.el8_3.s390x",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nss-util-devel-0:3.53.1-17.el8_3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
},
"product_reference": "nss-util-devel-0:3.53.1-17.el8_3.x86_64",
"relates_to_product_reference": "AppStream-8.3.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida",
"Nicola Tuveri",
"Yuval Yarom",
"Billy Bob Brumley"
],
"organization": "Network and Information Security Group (NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-6829",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-04-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: Side channel attack on ECDSA signature generation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-6829"
},
{
"category": "external",
"summary": "RHBZ#1826187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-6829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-02T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-02-16T14:33:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0538"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: Side channel attack on ECDSA signature generation"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12400",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-07-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1853983"
}
],
"notes": [
{
"category": "description",
"text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12400"
},
{
"category": "external",
"summary": "RHBZ#1853983",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12400"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-02-16T14:33:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0538"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
},
{
"names": [
"Cesar Pereida Garcia and the Network and Information Security Group"
],
"organization": "NISEC",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-12401",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"discovery_date": "2020-06-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1851294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: ECDSA timing attack mitigation bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12401"
},
{
"category": "external",
"summary": "RHBZ#1851294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12401"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-02-16T14:33:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0538"
},
{
"category": "workaround",
"details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: ECDSA timing attack mitigation bypass"
},
{
"acknowledgments": [
{
"names": [
"the Mozilla Project"
]
}
],
"cve": "CVE-2020-12403",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2020-08-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1868931"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-12403"
},
{
"category": "external",
"summary": "RHBZ#1868931",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403"
},
{
"category": "external",
"summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes",
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes"
}
],
"release_date": "2020-07-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-02-16T14:33:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect.",
"product_ids": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:0538"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.src",
"AppStream-8.3.0.Z.MAIN:nss-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-debugsource-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-softokn-freebl-devel-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-sysinit-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-tools-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-debuginfo-0:3.53.1-17.el8_3.x86_64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.aarch64",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.i686",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.ppc64le",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.s390x",
"AppStream-8.3.0.Z.MAIN:nss-util-devel-0:3.53.1-17.el8_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…