[ALSA-2024:0108] nss security update

Severity Moderate

Affected Packages 34

CVEs 1

nss security update

Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.

Security Fix(es):

nss: timing attack against RSA decryption (CVE-2023-5388)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/almalinux/nss?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-util?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-util?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-util?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-util-devel?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-util-devel?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-util-devel?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-tools?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-tools?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-sysinit?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-sysinit?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-freebl?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-freebl?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-freebl?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-freebl-devel?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-freebl-devel?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-freebl-devel?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-devel?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-devel?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-softokn-devel?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-devel?arch=x86_64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-devel?arch=i686&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nss-devel?arch=aarch64&distro=almalinux-9.3	< 3.90.0-4.el9_3
pkg:rpm/almalinux/nspr?arch=x86_64&distro=almalinux-9.3	< 4.35.0-4.el9_3
pkg:rpm/almalinux/nspr?arch=i686&distro=almalinux-9.3	< 4.35.0-4.el9_3
pkg:rpm/almalinux/nspr?arch=aarch64&distro=almalinux-9.3	< 4.35.0-4.el9_3
pkg:rpm/almalinux/nspr-devel?arch=x86_64&distro=almalinux-9.3	< 4.35.0-4.el9_3
pkg:rpm/almalinux/nspr-devel?arch=i686&distro=almalinux-9.3	< 4.35.0-4.el9_3
pkg:rpm/almalinux/nspr-devel?arch=aarch64&distro=almalinux-9.3	< 4.35.0-4.el9_3

ID

ALSA-2024:0108

Severity

moderate

URL

https://errata.almalinux.org/ALSA-2024:0108.html

Published

2024-01-10T00:00:00
(8 months ago)

Modified

2024-01-11T16:32:08
(8 months ago)

Rights

Other Advisories

Source	# ID	URL
RHSA	RHSA-2024:0108	https://access.redhat.com/errata/RHSA-2024:0108
CVE	CVE-2023-5388	https://access.redhat.com/security/cve/CVE-2023-5388
Bugzilla	2243644	https://bugzilla.redhat.com/2243644
Self	ALSA-2024:0108	https://errata.almalinux.org/9/ALSA-2024-0108.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/almalinux/nss?arch=x86_64&distro=almalinux-9.3	almalinux	nss	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss?arch=i686&distro=almalinux-9.3	almalinux	nss	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss?arch=aarch64&distro=almalinux-9.3	almalinux	nss	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-util?arch=x86_64&distro=almalinux-9.3	almalinux	nss-util	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-util?arch=i686&distro=almalinux-9.3	almalinux	nss-util	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-util?arch=aarch64&distro=almalinux-9.3	almalinux	nss-util	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-util-devel?arch=x86_64&distro=almalinux-9.3	almalinux	nss-util-devel	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-util-devel?arch=i686&distro=almalinux-9.3	almalinux	nss-util-devel	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-util-devel?arch=aarch64&distro=almalinux-9.3	almalinux	nss-util-devel	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-tools?arch=x86_64&distro=almalinux-9.3	almalinux	nss-tools	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-tools?arch=aarch64&distro=almalinux-9.3	almalinux	nss-tools	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-sysinit?arch=x86_64&distro=almalinux-9.3	almalinux	nss-sysinit	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-sysinit?arch=aarch64&distro=almalinux-9.3	almalinux	nss-sysinit	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-softokn?arch=x86_64&distro=almalinux-9.3	almalinux	nss-softokn	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-softokn?arch=i686&distro=almalinux-9.3	almalinux	nss-softokn	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-softokn?arch=aarch64&distro=almalinux-9.3	almalinux	nss-softokn	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-softokn-freebl?arch=x86_64&distro=almalinux-9.3	almalinux	nss-softokn-freebl	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-softokn-freebl?arch=i686&distro=almalinux-9.3	almalinux	nss-softokn-freebl	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-softokn-freebl?arch=aarch64&distro=almalinux-9.3	almalinux	nss-softokn-freebl	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-softokn-freebl-devel?arch=x86_64&distro=almalinux-9.3	almalinux	nss-softokn-freebl-devel	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-softokn-freebl-devel?arch=i686&distro=almalinux-9.3	almalinux	nss-softokn-freebl-devel	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-softokn-freebl-devel?arch=aarch64&distro=almalinux-9.3	almalinux	nss-softokn-freebl-devel	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-softokn-devel?arch=x86_64&distro=almalinux-9.3	almalinux	nss-softokn-devel	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-softokn-devel?arch=i686&distro=almalinux-9.3	almalinux	nss-softokn-devel	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-softokn-devel?arch=aarch64&distro=almalinux-9.3	almalinux	nss-softokn-devel	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nss-devel?arch=x86_64&distro=almalinux-9.3	almalinux	nss-devel	< 3.90.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nss-devel?arch=i686&distro=almalinux-9.3	almalinux	nss-devel	< 3.90.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nss-devel?arch=aarch64&distro=almalinux-9.3	almalinux	nss-devel	< 3.90.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nspr?arch=x86_64&distro=almalinux-9.3	almalinux	nspr	< 4.35.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nspr?arch=i686&distro=almalinux-9.3	almalinux	nspr	< 4.35.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nspr?arch=aarch64&distro=almalinux-9.3	almalinux	nspr	< 4.35.0-4.el9_3	almalinux-9.3	aarch64
Affected	pkg:rpm/almalinux/nspr-devel?arch=x86_64&distro=almalinux-9.3	almalinux	nspr-devel	< 4.35.0-4.el9_3	almalinux-9.3	x86_64
Affected	pkg:rpm/almalinux/nspr-devel?arch=i686&distro=almalinux-9.3	almalinux	nspr-devel	< 4.35.0-4.el9_3	almalinux-9.3	i686
Affected	pkg:rpm/almalinux/nspr-devel?arch=aarch64&distro=almalinux-9.3	almalinux	nspr-devel	< 4.35.0-4.el9_3	almalinux-9.3	aarch64

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date