RHSA-2015:1980Critical

Red Hat Security Advisory: nss and nspr security update

Published
November 4, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (3)

CVE-2015-7181 →CVE-2015-7182 →CVE-2015-7183 →

📋 Description

CVE-2015-7181 — nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133) CVE-2015-7182 — nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133) CVE-2015-7183 — nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)

🎯 Affected products83

  • Red Hat Enterprise Linux (v. 5 server)
  • Red Hat Enterprise Linux Desktop (v. 5 client)
  • Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • nspr-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • nspr-0:4.10.8-2.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.src as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • nspr-0:4.10.8-2.el5_11.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • nspr-0:4.10.8-2.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-0:4.10.8-2.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • nspr-debuginfo-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • nspr-debuginfo-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • nspr-debuginfo-0:4.10.8-2.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-debuginfo-0:4.10.8-2.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
  • nspr-debuginfo-0:4.10.8-2.el5_11.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • nspr-devel-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-devel-0:4.10.8-2.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)
  • nspr-devel-0:4.10.8-2.el5_11.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
  • nspr-devel-0:4.10.8-2.el5_11.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
  • +53 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (6)