Linux · Security advisory · July 30, 2019

RHSA-2019:1951: Security update for 12 packages

RHSA-2019:1951, released July 30, 2019, fixes 5 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0279
86th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 3 Routine 2

Fixed package versions

ProductReleaseFixed in
nsprRHEL 80:4.21.0-2.el8_0
nspr-develRHEL 80:4.21.0-2.el8_0
nssRHEL 80:3.44.0-7.el8_0
nss-develRHEL 80:3.44.0-7.el8_0
nss-softoknRHEL 80:3.44.0-7.el8_0
nss-softokn-develRHEL 80:3.44.0-7.el8_0
nss-softokn-freeblRHEL 80:3.44.0-7.el8_0
nss-softokn-freebl-develRHEL 80:3.44.0-7.el8_0
nss-sysinitRHEL 80:3.44.0-7.el8_0
nss-toolsRHEL 80:3.44.0-7.el8_0
nss-utilRHEL 80:3.44.0-7.el8_0
nss-util-develRHEL 80:3.44.0-7.el8_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-11729 nss-softokn-devel: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-... 7.5 0.0279 None reported
High CVE-2019-11719 nspr: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-... 7.5 0.0229 None reported
High CVE-2019-17007 nspr: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-... 7.5 0.0140 None reported
Routine CVE-2018-18508 nspr: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-... 6.5 0.0197 None reported
Routine CVE-2019-11727 nspr: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-... 5.3 0.0181 None reported
Showing 1 to 5 of 5 1