{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated nss and nspr packages that fix two security issues, various bugs,\nand add enhancements are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Network Security Services (NSS) is a set of libraries designed to support\nthe cross-platform development of security-enabled client and server\napplications. Netscape Portable Runtime (NSPR) provides platform\nindependence for non-GUI operating system facilities.\n\nIt was discovered that NSS leaked timing information when decrypting\nTLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites\nwere used. A remote attacker could possibly use this flaw to retrieve plain\ntext from the encrypted packets by using a TLS/SSL or DTLS server as a\npadding oracle. (CVE-2013-1620)\n\nAn out-of-bounds memory read flaw was found in the way NSS decoded certain\ncertificates. If an application using NSS decoded a malformed certificate,\nit could cause the application to crash. (CVE-2013-0791)\n\nRed Hat would like to thank the Mozilla project for reporting\nCVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter\nof CVE-2013-0791.\n\nThis update also fixes the following bugs:\n\n* A defect in the FreeBL library implementation of the Diffie-Hellman (DH)\nprotocol previously caused Openswan to drop connections. (BZ#958023)\n\n * A memory leak in the nssutil_ReadSecmodDB() function has been fixed.\n(BZ#986969)\n\nIn addition, the nss package has been upgraded to upstream version 3.14.3,\nand the nspr package has been upgraded to upstream version 4.9.5. These\nupdates provide a number of bug fixes and enhancements over the previous\nversions. (BZ#949845, BZ#924741)\n\nNote that while upstream NSS version 3.14 prevents the use of certificates\nthat have an MD5 signature, this erratum includes a patch that allows such\ncertificates by default. To prevent the use of certificates that have an\nMD5 signature, set the \"NSS_HASH_ALG_SUPPORT\" environment variable\nto \"-MD5\".\n\nUsers of NSS and NSPR are advised to upgrade to these updated packages,\nwhich fix these issues and add these enhancements. After installing this\nupdate, applications using NSS or NSPR must be restarted for this update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2013:1135", "url": "https://access.redhat.com/errata/RHSA-2013:1135" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "908234", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=908234" }, { "category": "external", "summary": "924741", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=924741" }, { "category": "external", "summary": "946947", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=946947" }, { "category": "external", "summary": "949845", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=949845" }, { "category": "external", "summary": "986969", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=986969" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1135.json" } ], "title": "Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update", "tracking": { "current_release_date": "2026-06-27T12:50:14+00:00", "generator": { "date": "2026-06-27T12:50:14+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.2.6" } }, "id": "RHSA-2013:1135", "initial_release_date": "2013-08-05T15:46:00+00:00", "revision_history": [ { "date": "2013-08-05T15:46:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2013-08-05T15:51:35+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-27T12:50:14+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.s390x", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.s390x", "product_id": "nspr-devel-0:4.9.5-1.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.s390x", "product": { "name": "nspr-0:4.9.5-1.el5_9.s390x", "product_id": "nspr-0:4.9.5-1.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nss-tools-0:3.14.3-6.el5_9.s390x", "product": { "name": "nss-tools-0:3.14.3-6.el5_9.s390x", "product_id": "nss-tools-0:3.14.3-6.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-tools@3.14.3-6.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.s390x", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.s390x", "product_id": "nss-devel-0:3.14.3-6.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.s390x", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.s390x", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=s390x" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.s390x", "product": { "name": "nss-0:3.14.3-6.el5_9.s390x", "product_id": "nss-0:3.14.3-6.el5_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.s390", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.s390", "product_id": "nspr-devel-0:4.9.5-1.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=s390" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.s390", "product": { "name": "nspr-0:4.9.5-1.el5_9.s390", "product_id": "nspr-0:4.9.5-1.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=s390" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.s390", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.s390", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=s390" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=s390" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.s390", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.s390", "product_id": "nss-devel-0:3.14.3-6.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=s390" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.s390", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.s390", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=s390" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.s390", "product": { "name": "nss-0:3.14.3-6.el5_9.s390", "product_id": "nss-0:3.14.3-6.el5_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=s390" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.x86_64", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.x86_64", "product_id": "nspr-devel-0:4.9.5-1.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.x86_64", "product": { "name": "nspr-0:4.9.5-1.el5_9.x86_64", "product_id": "nspr-0:4.9.5-1.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nss-tools-0:3.14.3-6.el5_9.x86_64", "product": { "name": "nss-tools-0:3.14.3-6.el5_9.x86_64", "product_id": "nss-tools-0:3.14.3-6.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-tools@3.14.3-6.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.x86_64", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.x86_64", "product_id": "nss-devel-0:3.14.3-6.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=x86_64" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.x86_64", "product": { "name": "nss-0:3.14.3-6.el5_9.x86_64", "product_id": "nss-0:3.14.3-6.el5_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.i386", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.i386", "product_id": "nspr-devel-0:4.9.5-1.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.i386", "product": { "name": "nspr-0:4.9.5-1.el5_9.i386", "product_id": "nspr-0:4.9.5-1.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.i386", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.i386", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.i386", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.i386", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.i386", "product": { "name": "nss-0:3.14.3-6.el5_9.i386", "product_id": "nss-0:3.14.3-6.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.i386", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.i386", "product_id": "nss-devel-0:3.14.3-6.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=i386" } } }, { "category": "product_version", "name": "nss-tools-0:3.14.3-6.el5_9.i386", "product": { "name": "nss-tools-0:3.14.3-6.el5_9.i386", "product_id": "nss-tools-0:3.14.3-6.el5_9.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-tools@3.14.3-6.el5_9?arch=i386" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.ppc", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.ppc", "product_id": "nspr-devel-0:4.9.5-1.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.ppc", "product": { "name": "nspr-0:4.9.5-1.el5_9.ppc", "product_id": "nspr-0:4.9.5-1.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nss-tools-0:3.14.3-6.el5_9.ppc", "product": { "name": "nss-tools-0:3.14.3-6.el5_9.ppc", "product_id": "nss-tools-0:3.14.3-6.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-tools@3.14.3-6.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.ppc", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.ppc", "product_id": "nss-devel-0:3.14.3-6.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.ppc", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.ppc", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=ppc" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.ppc", "product": { "name": "nss-0:3.14.3-6.el5_9.ppc", "product_id": "nss-0:3.14.3-6.el5_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=ppc" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.ppc64", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.ppc64", "product_id": "nspr-devel-0:4.9.5-1.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=ppc64" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.ppc64", "product": { "name": "nspr-0:4.9.5-1.el5_9.ppc64", "product_id": "nspr-0:4.9.5-1.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=ppc64" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=ppc64" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=ppc64" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.ppc64", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.ppc64", "product_id": "nss-devel-0:3.14.3-6.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=ppc64" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=ppc64" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.ppc64", "product": { "name": "nss-0:3.14.3-6.el5_9.ppc64", "product_id": "nss-0:3.14.3-6.el5_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=ppc64" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "nspr-devel-0:4.9.5-1.el5_9.ia64", "product": { "name": "nspr-devel-0:4.9.5-1.el5_9.ia64", "product_id": "nspr-devel-0:4.9.5-1.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-devel@4.9.5-1.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.ia64", "product": { "name": "nspr-0:4.9.5-1.el5_9.ia64", "product_id": "nspr-0:4.9.5-1.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "product": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "product_id": "nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr-debuginfo@4.9.5-1.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nss-tools-0:3.14.3-6.el5_9.ia64", "product": { "name": "nss-tools-0:3.14.3-6.el5_9.ia64", "product_id": "nss-tools-0:3.14.3-6.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-tools@3.14.3-6.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "product": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "product_id": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-pkcs11-devel@3.14.3-6.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nss-devel-0:3.14.3-6.el5_9.ia64", "product": { "name": "nss-devel-0:3.14.3-6.el5_9.ia64", "product_id": "nss-devel-0:3.14.3-6.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-devel@3.14.3-6.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nss-debuginfo-0:3.14.3-6.el5_9.ia64", "product": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.ia64", "product_id": "nss-debuginfo-0:3.14.3-6.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss-debuginfo@3.14.3-6.el5_9?arch=ia64" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.ia64", "product": { "name": "nss-0:3.14.3-6.el5_9.ia64", "product_id": "nss-0:3.14.3-6.el5_9.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=ia64" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "nspr-0:4.9.5-1.el5_9.src", "product": { "name": "nspr-0:4.9.5-1.el5_9.src", "product_id": "nspr-0:4.9.5-1.el5_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nspr@4.9.5-1.el5_9?arch=src" } } }, { "category": "product_version", "name": "nss-0:3.14.3-6.el5_9.src", "product": { "name": "nss-0:3.14.3-6.el5_9.src", "product_id": "nss-0:3.14.3-6.el5_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nss@3.14.3-6.el5_9?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386" }, "product_reference": "nspr-0:4.9.5-1.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64" }, "product_reference": "nspr-0:4.9.5-1.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc" }, "product_reference": "nspr-0:4.9.5-1.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64" }, "product_reference": "nspr-0:4.9.5-1.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390" }, "product_reference": "nspr-0:4.9.5-1.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x" }, "product_reference": "nspr-0:4.9.5-1.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src" }, "product_reference": "nspr-0:4.9.5-1.el5_9.src", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64" }, "product_reference": "nspr-0:4.9.5-1.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-debuginfo-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64" }, "product_reference": "nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nspr-devel-0:4.9.5-1.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64" }, "product_reference": "nspr-devel-0:4.9.5-1.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386" }, "product_reference": "nss-0:3.14.3-6.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64" }, "product_reference": "nss-0:3.14.3-6.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc" }, "product_reference": "nss-0:3.14.3-6.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64" }, "product_reference": "nss-0:3.14.3-6.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390" }, "product_reference": "nss-0:3.14.3-6.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x" }, "product_reference": "nss-0:3.14.3-6.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src" }, "product_reference": "nss-0:3.14.3-6.el5_9.src", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64" }, "product_reference": "nss-0:3.14.3-6.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-debuginfo-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64" }, "product_reference": "nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-devel-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64" }, "product_reference": "nss-devel-0:3.14.3-6.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64" }, "product_reference": "nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-tools-0:3.14.3-6.el5_9.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386" }, "product_reference": "nss-tools-0:3.14.3-6.el5_9.i386", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-tools-0:3.14.3-6.el5_9.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64" }, "product_reference": "nss-tools-0:3.14.3-6.el5_9.ia64", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-tools-0:3.14.3-6.el5_9.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc" }, "product_reference": "nss-tools-0:3.14.3-6.el5_9.ppc", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-tools-0:3.14.3-6.el5_9.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x" }, "product_reference": "nss-tools-0:3.14.3-6.el5_9.s390x", "relates_to_product_reference": "5Server-5.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "nss-tools-0:3.14.3-6.el5_9.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" }, "product_reference": "nss-tools-0:3.14.3-6.el5_9.x86_64", "relates_to_product_reference": "5Server-5.9.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Mozilla project" ] }, { "names": [ "Ambroz Bizjak" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2013-0791", "discovery_date": "2013-04-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "946947" } ], "notes": [ { "category": "description", "text": "The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.", "title": "Vulnerability description" }, { "category": "summary", "text": "Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0791" }, { "category": "external", "summary": "RHBZ#946947", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=946947" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0791", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0791" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0791", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0791" }, { "category": "external", "summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-40.html", "url": "http://www.mozilla.org/security/announce/2013/mfsa2013-40.html" } ], "release_date": "2013-04-02T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-08-05T15:46:00+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:1135" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)" }, { "cve": "CVE-2013-1620", "discovery_date": "2013-02-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "908234" } ], "notes": [ { "category": "description", "text": "The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: TLS CBC padding timing attack", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-1620" }, { "category": "external", "summary": "RHBZ#908234", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=908234" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1620", "url": "https://www.cve.org/CVERecord?id=CVE-2013-1620" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1620", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1620" }, { "category": "external", "summary": "http://www.isg.rhul.ac.uk/tls/", "url": "http://www.isg.rhul.ac.uk/tls/" } ], "release_date": "2013-02-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-08-05T15:46:00+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:1135" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.src", "5Server-5.9.Z:nspr-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-debuginfo-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.i386", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ia64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.ppc64", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.s390x", "5Server-5.9.Z:nspr-devel-0:4.9.5-1.el5_9.x86_64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.src", "5Server-5.9.Z:nss-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-debuginfo-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.ppc64", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-pkcs11-devel-0:3.14.3-6.el5_9.x86_64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.i386", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ia64", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.ppc", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.s390x", "5Server-5.9.Z:nss-tools-0:3.14.3-6.el5_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: TLS CBC padding timing attack" } ] }