Synopsis
Moderate: nss security and bug fix update
Type/Severity
Security Advisory: Moderate
Topic
An update for nss is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.
Security Fix(es):
- nss: Side channel attack on ECDSA signature generation (CVE-2020-6829)
- nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function (CVE-2020-12400)
- nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read (CVE-2020-12403)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- Support key wrap/unwrap with RSA-OAEP (BZ#1896431)
- 1536bit group from RFC3526 is allowed in FIPS mode when in policy DH-MIN is set to be lower than 1536 (BZ#1896432)
- when NSS_SDB_USE_CACHE not set, after curl access https, dentry increase but never released - consider alternative algorithm for benchmarking ACCESS call in sdb_measureAccess [rhel-8] (BZ#1896933)
- Policy should allow overriding library defaults (BZ#1898702)
- KDF-self-tests-induced changes for nss in RHEL 8.4 (BZ#1898953)
- nss: non-blocksize requests to IKEv1 KDF returns bogus output (BZ#1904408)
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect.
Affected Products
-
Red Hat Enterprise Linux for x86_64 8 x86_64
-
Red Hat Enterprise Linux for IBM z Systems 8 s390x
-
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
-
Red Hat Enterprise Linux for ARM 64 8 aarch64
Fixes
- BZ - 1826187 - CVE-2020-6829 nss: Side channel attack on ECDSA signature generation
- BZ - 1853983 - CVE-2020-12400 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function
- BZ - 1868931 - CVE-2020-12403 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read
- BZ - 1896431 - Support key wrap/unwrap with RSA-OAEP [rhel-8.3.0.z]
- BZ - 1896432 - 1536bit group from RFC3526 is allowed in FIPS mode when in policy DH-MIN is set to be lower than 1536 [rhel-8.3.0.z]
- BZ - 1896933 - when NSS_SDB_USE_CACHE not set, after curl access https, dentry increase but never released - consider alternative algorithm for benchmarking ACCESS call in sdb_measureAccess [rhel-8] [rhel-8.3.0.z]
- BZ - 1898953 - KDF-self-tests-induced changes for nss in RHEL 8.4 [rhel-8.3.0.z]
CVEs
References
Vulmon