[CLSA-2026:1785841535] nss: Fix of CVE-2024-0743
Type:
security
Severity:
Important
Release date:
2026-08-04 11:05:46 UTC
Description:
- CVE-2024-0743: add defensive check for large ssl_DefSend return values in ssl_SendSavedWriteData to prevent pendingBuf.len underflow (Mozilla bug 1867408, MFSA-2024-13, fixed upstream in NSS 3.90.2)
CVEs fixed:
Updated packages:
  • nspr-4.35.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:117a05eb53830b68e71f7f151e27a450b97e7418f7e27c0a9ee147d55c4d2532
  • nspr-4.35.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:03b2e2b7f3e89501de3075f9874500309a60d509c0a005a974e7738944b63a9a
  • nspr-devel-4.35.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:7417f5c2ef4263534826d4e9411688a66da41feb1527d253ebf4d48c446c1367
  • nspr-devel-4.35.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:d6bcaf3afd57a8989e5bedca35fde3bb9fa86ca6812620e4b7c786d1b1126ddf
  • nss-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:ccf439fd5933f523f9ae37fa628bcca9eb4e898ddb3a00afefd8eb6416ac3653
  • nss-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:8c4bab75ac227b8c2e1fad4c4121852dae669007d529c58add30407a34c2d6df
  • nss-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:209192373f0c8aac59c98fc5c74fb1206a986c4d6b7d15a7ba328b3a39adf8df
  • nss-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:9df44a04bdd35a95c51bf01a745dd6f4ca3f5a9380fc3a4c252ef4f955a08dbf
  • nss-pkcs11-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:1bb8210f4cbf18c21295916aa0a27ae065a1e1ad7f8896812aaa86fafadd228d
  • nss-softokn-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:a8704f36b30181176218250c3fa55a9acbd3a9aecc8618da9487bd5d60da277b
  • nss-softokn-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:562d4d135ca50156e87b5c105d3db4cf83325823906389d91a8a624367f36ffc
  • nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:6d1d9719c19c8227678b93a1ede17a6894835c3d6fa708d2f117e46bd3524888
  • nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:dbfdfffac2039d46b7121bd48edae1f8c52e899b6cea2258f952ab85249c3078
  • nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:c7149ac07e98062c9ed2cd1dcfeea4acf06b73018001396430484da7951c8f14
  • nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:e5f5ab7434d3f09e92da0dca27a6aa4fd5dbf46d2801ce1e87b6b53eedc1cf8d
  • nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:cf82b9ff94a0d6cb82b46582451dcc5b6d748be940467ea629f4366e4d6fefaa
  • nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:e977bcc0e65448eb5e2fa7cd83920f8d5060755f2b5a569b8b15f02025599355
  • nss-sysinit-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:c961a10cb797c1737e2a89403662d1dec0f3aed16de39bc7a3c2c5a5de547710
  • nss-tools-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:542334ee4d388850b9d013a479a751bb9d8eded4130c8457f10d9f5a581a07b2
  • nss-util-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:6496ac0653893902a49c83e95ef8cbfb93bef00a78e367f50202e320266a5874
  • nss-util-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:581c269e8c9b1dde4a8c048dc34e457cb875a54a8a7a3953a99e35b389925205
  • nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm
    sha:fc7bfec07a213e2fe1876b70eb977fdd8f4794714c0d9bca54be0415e4002932
  • nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm
    sha:e1796071bf9c2f4473a615594065a06dddd11ab34ad5a5f54b9a71ddefdccecd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.