Advisories » MGASA-2019-0374

Updated nss packages fix security vulnerability

Publication date: 08 Dec 2019
Modification date: 08 Dec 2019
Type: security
Affected Mageia releases : 7
CVE: CVE-2019-11745

Description

Updated nss packages fix security vulnerability:

Out-of-bounds write when passing an output buffer smaller than the block
size to NSC_EncryptUpdate (CVE-2019-11745).

Also, rootcerts has been updated to 20191126.00
                

References

• https://bugs.mageia.org/show_bug.cgi?id=25792
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47.1_release_notes
• https://usn.ubuntu.com/4203-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11745

SRPMS

7/core

• nss-3.47.1-1.mga7
• rootcerts-20191126.00-1.mga7