RedHat nspr CVE-2019-17007 Certificate Validation Bypass Vulnerability

Description

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications.Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities. The nss, nss-softokn and nss-util packages have been upgraded to upstream versions 3.44, and the nspr packages have been upgraded to upstream version 4.21. The upgraded versions provide a number of bug fixes and enhancements over the previous versions. Notably, these upgrades allow users to upgrade to Mozilla Firefox 68 Extended Support Release. (BZ#1684609, BZ#1743623, BZ#1743625, BZ#1743628)

Affected Applications

nspr

CVE References

Other References