Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Red Hat NSS Security Update Exposes Sensitive Data
published 2 years ago
Summary
A security update is available for Red Hat NSS, a software library used by browsers and other applications to manage secure connections. If left unpatched, this vulnerability could allow an attacker to access sensitive information. Update your systems as soon as possible to ensure the security of your data.
What to do
- Update redhat nspr to version 0:4.8.4-1.1.el4_8.
- Update redhat nspr-debuginfo to version 0:4.8.4-1.1.el4_8.
- Update redhat nspr-devel to version 0:4.8.4-1.1.el4_8.
- Update redhat nss to version 0:3.12.6-1.el4_8.
- Update redhat nss-debuginfo to version 0:3.12.6-1.el4_8.
- Update redhat nss-devel to version 0:3.12.6-1.el4_8.
- Update redhat nss-tools to version 0:3.12.6-1.el4_8.
- Update redhat nspr to version 0:4.8.4-1.el5_4.
- Update redhat nspr-debuginfo to version 0:4.8.4-1.el5_4.
- Update redhat nspr-devel to version 0:4.8.4-1.el5_4.
- Update redhat nss to version 0:3.12.6-1.el5_4.
- Update redhat nss-debuginfo to version 0:3.12.6-1.el5_4.
- Update redhat nss-devel to version 0:3.12.6-1.el5_4.
- Update redhat nss-pkcs11-devel to version 0:3.12.6-1.el5_4.
- Update redhat nss-tools to version 0:3.12.6-1.el5_4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:4::as | redhat | nspr |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::as | redhat | nspr-debuginfo |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::as | redhat | nspr-devel |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::as | redhat | nss |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::as | redhat | nss-debuginfo |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::as | redhat | nss-devel |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::as | redhat | nss-tools |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nspr |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nspr-debuginfo |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nspr-devel |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nss |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nss-debuginfo |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nss-devel |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::desktop | redhat | nss-tools |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nspr |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nspr-debuginfo |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nspr-devel |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nss |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nss-debuginfo |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nss-devel |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::es | redhat | nss-tools |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nspr |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nspr-debuginfo |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nspr-devel |
< 0:4.8.4-1.1.el4_8 Fix: upgrade to 0:4.8.4-1.1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nss |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nss-debuginfo |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nss-devel |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:4::ws | redhat | nss-tools |
< 0:3.12.6-1.el4_8 Fix: upgrade to 0:3.12.6-1.el4_8
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nspr |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nspr-debuginfo |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nspr-devel |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nss |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nss-debuginfo |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nss-devel |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nss-pkcs11-devel |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | nss-tools |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nspr |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nspr-debuginfo |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nspr-devel |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nss |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nss-debuginfo |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nss-devel |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nss-pkcs11-devel |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::client | redhat | nss-tools |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nspr |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nspr-debuginfo |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nspr-devel |
< 0:4.8.4-1.el5_4 Fix: upgrade to 0:4.8.4-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nss |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nss-debuginfo |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nss-devel |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
Showing 50 of 52. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:5::server | redhat | nss-pkcs11-devel |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
| Red Hat:enterprise_linux:5::server | redhat | nss-tools |
< 0:3.12.6-1.el5_4 Fix: upgrade to 0:3.12.6-1.el5_4
|
Original advisory text
Red Hat Security Advisory: nss security update
References
- https://access.redhat.com/errata/RHSA-2010:0165 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=533125 Third Party Advisory
- http://www.redhat.com/security/updates/classification/#moderate Third Party Advisory
- http://kbase.redhat.com/faq/docs/DOC-20491 Third Party Advisory
- http://kbase.redhat.com/faq/docs/DOC-28439 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0165.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2009-3555 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2009-3555 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-3555 Vendor Advisory
Timeline
Published13 Sep 2024
Updated28 May 2026
First seen28 May 2026
Sources
RHSA-2010:0165 · OSV
Track software like this
Free during beta