RHSA-2015:1981Critical

Red Hat Security Advisory: nss, nss-util, and nspr security update

Published
November 4, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (3)

CVE-2015-7181 →CVE-2015-7182 →CVE-2015-7183 →

📋 Description

CVE-2015-7181 — nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133) CVE-2015-7182 — nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133) CVE-2015-7183 — nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)

🎯 Affected products200

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • nspr-0:4.10.8-2.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • nspr-0:4.10.8-2.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • nspr-0:4.10.8-2.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • nspr-0:4.10.8-2.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • nspr-0:4.10.8-2.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • nspr-0:4.10.8-2.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • nspr-0:4.10.8-2.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • nspr-0:4.10.8-2.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • nspr-0:4.10.8-2.el6_7.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • nspr-0:4.10.8-2.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • nspr-0:4.10.8-2.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • nspr-0:4.10.8-2.el6_7.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • nspr-0:4.10.8-2.el6_7.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • nspr-0:4.10.8-2.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (6)