Vulnerability-Lookup

RHSA-2020_3280

Vulnerability from csaf_redhat - Published: 2020-08-03 13:04 - Updated: 2024-11-22 15:25

Summary

Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for nss and nspr is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities. The following packages have been upgraded to a later upstream version: nss (3.53.1), nspr (4.25.0). (BZ#1809549, BZ#1809550) Security Fix(es): * nss: UAF in sftk_FreeSession due to improper refcounting (CVE-2019-11756) * nss: Check length of inputs for cryptographic primitives (CVE-2019-17006) * nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402) * nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state (CVE-2019-17023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Install of update of nss.x86_64 adds i686 into transaction (BZ#1663187) * NSS does not set downgrade sentinel in ServerHello.random for TLS 1.0 and TLS 1.1 (BZ#1691409) * TLS Keying Material Exporter is unsupported by command line tools (BZ#1691454) * TLS_AES_256_GCM_SHA384 is not marked as FIPS compatible (BZ#1711375) * Make TLS 1.3 work in FIPS mode (BZ#1724250) * NSS rejects records with large padding with SHA384 HMAC (BZ#1750921) * NSS missing IKEv1 Quick Mode KDF (BZ#1809637) * Name Constraints validation: CN treated as DNS name even when syntactically invalid as DNS name (BZ#1825270) * FIPS needs nss to restrict valid dh primes to those primes that are approved. (BZ#1854564) * nss needs to comply to the new SP800-56A rev 3 requirements (BZ#1855825) Enhancement(s): * [RFE] nss should use AES for storage of keys (BZ#1723819)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2019-11756

A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.

7.1 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 105 products

Product	Version	Remediation
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2019-17006

A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.

8.1 (High)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 105 products

Product	Version	Remediation
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2019-17023

A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 105 products

Product	Version	Remediation
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2020-12399

A flaw was found in the DSA signature generation function in nss. During the process of generating a DSA signature, the nonce value 'k' is not padded, exposing the bit length. Combined with other techniques, this can result in the recovery of the DSA private key. The highest threat from this vulnerability is to data confidentiality.

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 105 products

Product	Version	Remediation
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2020-12402

A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 105 products

Product	Version	Remediation
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

41 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:3280	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1663187	external
https://bugzilla.redhat.com/show_bug.cgi?id=1691454	external
https://bugzilla.redhat.com/show_bug.cgi?id=1711375	external
https://bugzilla.redhat.com/show_bug.cgi?id=1724250	external
https://bugzilla.redhat.com/show_bug.cgi?id=1750921	external
https://bugzilla.redhat.com/show_bug.cgi?id=1774835	external
https://bugzilla.redhat.com/show_bug.cgi?id=1775916	external
https://bugzilla.redhat.com/show_bug.cgi?id=1791225	external
https://bugzilla.redhat.com/show_bug.cgi?id=1809637	external
https://bugzilla.redhat.com/show_bug.cgi?id=1825270	external
https://bugzilla.redhat.com/show_bug.cgi?id=1826231	external
https://bugzilla.redhat.com/show_bug.cgi?id=1854564	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2019-11756	self
https://bugzilla.redhat.com/show_bug.cgi?id=1774835	external
https://www.cve.org/CVERecord?id=CVE-2019-11756	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11756	external
https://developer.mozilla.org/en-US/docs/Mozilla/…	external
https://access.redhat.com/security/cve/CVE-2019-17006	self
https://bugzilla.redhat.com/show_bug.cgi?id=1775916	external
https://www.cve.org/CVERecord?id=CVE-2019-17006	external
https://nvd.nist.gov/vuln/detail/CVE-2019-17006	external
https://developer.mozilla.org/en-US/docs/Mozilla/…	external
https://access.redhat.com/security/cve/CVE-2019-17023	self
https://bugzilla.redhat.com/show_bug.cgi?id=1791225	external
https://www.cve.org/CVERecord?id=CVE-2019-17023	external
https://nvd.nist.gov/vuln/detail/CVE-2019-17023	external
https://developer.mozilla.org/en-US/docs/Mozilla/…	external
https://access.redhat.com/security/cve/CVE-2020-12399	self
https://bugzilla.redhat.com/show_bug.cgi?id=1826177	external
https://www.cve.org/CVERecord?id=CVE-2020-12399	external
https://nvd.nist.gov/vuln/detail/CVE-2020-12399	external
https://developer.mozilla.org/en-US/docs/Mozilla/…	external
https://developer.mozilla.org/en-US/docs/Mozilla/…	external
https://access.redhat.com/security/cve/CVE-2020-12402	self
https://bugzilla.redhat.com/show_bug.cgi?id=1826231	external
https://www.cve.org/CVERecord?id=CVE-2020-12402	external
https://nvd.nist.gov/vuln/detail/CVE-2020-12402	external
https://developer.mozilla.org/en-US/docs/Mozilla/…	external

Acknowledgments

the Mozilla project

the Mozilla Project

Tampere University Cesar Pereida Garcia Network and Information Security Group

Network and Information Security Group (NISEC Billy Bob Brumley Cesar Pereida Nicola Tuveri Yuval Yarom

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for nss and nspr is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications.\n\nNetscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities.\n\nThe following packages have been upgraded to a later upstream version: nss (3.53.1), nspr (4.25.0). (BZ#1809549, BZ#1809550)\n\nSecurity Fix(es):\n\n* nss: UAF in sftk_FreeSession due to improper refcounting (CVE-2019-11756)\n\n* nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)\n\n* nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)\n\n* nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state (CVE-2019-17023)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Install of update of nss.x86_64 adds i686 into transaction (BZ#1663187)\n\n* NSS does not set downgrade sentinel in ServerHello.random for TLS 1.0 and TLS 1.1 (BZ#1691409)\n\n* TLS Keying Material Exporter is unsupported by command line tools (BZ#1691454)\n\n* TLS_AES_256_GCM_SHA384 is not marked as FIPS compatible (BZ#1711375)\n\n* Make TLS 1.3 work in FIPS mode (BZ#1724250)\n\n* NSS rejects records with large padding with SHA384 HMAC (BZ#1750921)\n\n* NSS missing IKEv1 Quick Mode KDF (BZ#1809637)\n\n* Name Constraints validation: CN treated as DNS name even when syntactically invalid as DNS name (BZ#1825270)\n\n* FIPS needs nss to restrict valid dh primes to those primes that are approved. (BZ#1854564)\n\n* nss needs to comply to the new SP800-56A rev 3 requirements (BZ#1855825)\n\nEnhancement(s):\n\n* [RFE] nss should use AES for storage of keys (BZ#1723819)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:3280",
        "url": "https://access.redhat.com/errata/RHSA-2020:3280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1663187",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1663187"
      },
      {
        "category": "external",
        "summary": "1691454",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1691454"
      },
      {
        "category": "external",
        "summary": "1711375",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1711375"
      },
      {
        "category": "external",
        "summary": "1724250",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1724250"
      },
      {
        "category": "external",
        "summary": "1750921",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1750921"
      },
      {
        "category": "external",
        "summary": "1774835",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835"
      },
      {
        "category": "external",
        "summary": "1775916",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916"
      },
      {
        "category": "external",
        "summary": "1791225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225"
      },
      {
        "category": "external",
        "summary": "1809637",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1809637"
      },
      {
        "category": "external",
        "summary": "1825270",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1825270"
      },
      {
        "category": "external",
        "summary": "1826231",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231"
      },
      {
        "category": "external",
        "summary": "1854564",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1854564"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3280.json"
      }
    ],
    "title": "Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-22T15:25:02+00:00",
      "generator": {
        "date": "2024-11-22T15:25:02+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2020:3280",
      "initial_release_date": "2020-08-03T13:04:49+00:00",
      "revision_history": [
        {
          "date": "2020-08-03T13:04:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-08-03T13:04:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T15:25:02+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.2.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nspr-0:4.25.0-2.el8_2.i686",
                "product": {
                  "name": "nspr-0:4.25.0-2.el8_2.i686",
                  "product_id": "nspr-0:4.25.0-2.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr@4.25.0-2.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-devel-0:4.25.0-2.el8_2.i686",
                "product": {
                  "name": "nspr-devel-0:4.25.0-2.el8_2.i686",
                  "product_id": "nspr-devel-0:4.25.0-2.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-devel@4.25.0-2.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debugsource-0:4.25.0-2.el8_2.i686",
                "product": {
                  "name": "nspr-debugsource-0:4.25.0-2.el8_2.i686",
                  "product_id": "nspr-debugsource-0:4.25.0-2.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debugsource@4.25.0-2.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debuginfo-0:4.25.0-2.el8_2.i686",
                "product": {
                  "name": "nspr-debuginfo-0:4.25.0-2.el8_2.i686",
                  "product_id": "nspr-debuginfo-0:4.25.0-2.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debuginfo@4.25.0-2.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-devel-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-devel-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-devel-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-devel@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-softokn-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-softokn-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-devel-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-softokn-devel-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-softokn-devel-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-util-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-util-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-devel-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-util-devel-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-util-devel-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debugsource-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-debugsource-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-debugsource-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debuginfo-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-11.el8_2?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
                "product": {
                  "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_id": "nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-11.el8_2?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nspr-0:4.25.0-2.el8_2.x86_64",
                "product": {
                  "name": "nspr-0:4.25.0-2.el8_2.x86_64",
                  "product_id": "nspr-0:4.25.0-2.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr@4.25.0-2.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-devel-0:4.25.0-2.el8_2.x86_64",
                "product": {
                  "name": "nspr-devel-0:4.25.0-2.el8_2.x86_64",
                  "product_id": "nspr-devel-0:4.25.0-2.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-devel@4.25.0-2.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
                "product": {
                  "name": "nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
                  "product_id": "nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debugsource@4.25.0-2.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
                "product": {
                  "name": "nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
                  "product_id": "nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debuginfo@4.25.0-2.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-devel-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-devel@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-softokn-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-softokn-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-sysinit-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-sysinit-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-tools-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-tools-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-util-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-util-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-devel-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-util-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-util-devel-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debugsource-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-debugsource-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-debugsource-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
                "product": {
                  "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_id": "nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-11.el8_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nspr-0:4.25.0-2.el8_2.ppc64le",
                "product": {
                  "name": "nspr-0:4.25.0-2.el8_2.ppc64le",
                  "product_id": "nspr-0:4.25.0-2.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr@4.25.0-2.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-devel-0:4.25.0-2.el8_2.ppc64le",
                "product": {
                  "name": "nspr-devel-0:4.25.0-2.el8_2.ppc64le",
                  "product_id": "nspr-devel-0:4.25.0-2.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-devel@4.25.0-2.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
                "product": {
                  "name": "nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
                  "product_id": "nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debugsource@4.25.0-2.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
                "product": {
                  "name": "nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
                  "product_id": "nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debuginfo@4.25.0-2.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-devel-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-devel@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-softokn-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-softokn-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-tools-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-tools-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-util-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-util-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                "product": {
                  "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_id": "nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-11.el8_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nspr-0:4.25.0-2.el8_2.s390x",
                "product": {
                  "name": "nspr-0:4.25.0-2.el8_2.s390x",
                  "product_id": "nspr-0:4.25.0-2.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr@4.25.0-2.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-devel-0:4.25.0-2.el8_2.s390x",
                "product": {
                  "name": "nspr-devel-0:4.25.0-2.el8_2.s390x",
                  "product_id": "nspr-devel-0:4.25.0-2.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-devel@4.25.0-2.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debugsource-0:4.25.0-2.el8_2.s390x",
                "product": {
                  "name": "nspr-debugsource-0:4.25.0-2.el8_2.s390x",
                  "product_id": "nspr-debugsource-0:4.25.0-2.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debugsource@4.25.0-2.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
                "product": {
                  "name": "nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
                  "product_id": "nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debuginfo@4.25.0-2.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-devel-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-devel-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-devel-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-devel@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-softokn-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-softokn-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-sysinit-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-sysinit-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-tools-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-tools-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-util-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-util-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-devel-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-util-devel-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-util-devel-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debugsource-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-debugsource-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-debugsource-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debuginfo-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
                "product": {
                  "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_id": "nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-11.el8_2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nspr-0:4.25.0-2.el8_2.aarch64",
                "product": {
                  "name": "nspr-0:4.25.0-2.el8_2.aarch64",
                  "product_id": "nspr-0:4.25.0-2.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr@4.25.0-2.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-devel-0:4.25.0-2.el8_2.aarch64",
                "product": {
                  "name": "nspr-devel-0:4.25.0-2.el8_2.aarch64",
                  "product_id": "nspr-devel-0:4.25.0-2.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-devel@4.25.0-2.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
                "product": {
                  "name": "nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
                  "product_id": "nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debugsource@4.25.0-2.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
                "product": {
                  "name": "nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
                  "product_id": "nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr-debuginfo@4.25.0-2.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-devel-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-devel@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-softokn-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-softokn-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-devel@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-devel@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-sysinit-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-sysinit-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-tools-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-tools-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-util-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-util-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-devel-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-util-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-util-devel-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-devel@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debugsource-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-debugsource-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-debugsource-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debugsource@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-debuginfo@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-debuginfo@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-softokn-freebl-debuginfo@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-sysinit-debuginfo@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-tools-debuginfo@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
                "product": {
                  "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_id": "nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss-util-debuginfo@3.53.1-11.el8_2?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nspr-0:4.25.0-2.el8_2.src",
                "product": {
                  "name": "nspr-0:4.25.0-2.el8_2.src",
                  "product_id": "nspr-0:4.25.0-2.el8_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nspr@4.25.0-2.el8_2?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nss-0:3.53.1-11.el8_2.src",
                "product": {
                  "name": "nss-0:3.53.1-11.el8_2.src",
                  "product_id": "nss-0:3.53.1-11.el8_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nss@3.53.1-11.el8_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-0:4.25.0-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64"
        },
        "product_reference": "nspr-0:4.25.0-2.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-0:4.25.0-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686"
        },
        "product_reference": "nspr-0:4.25.0-2.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-0:4.25.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le"
        },
        "product_reference": "nspr-0:4.25.0-2.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-0:4.25.0-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x"
        },
        "product_reference": "nspr-0:4.25.0-2.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-0:4.25.0-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src"
        },
        "product_reference": "nspr-0:4.25.0-2.el8_2.src",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-0:4.25.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64"
        },
        "product_reference": "nspr-0:4.25.0-2.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debuginfo-0:4.25.0-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64"
        },
        "product_reference": "nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debuginfo-0:4.25.0-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686"
        },
        "product_reference": "nspr-debuginfo-0:4.25.0-2.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le"
        },
        "product_reference": "nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debuginfo-0:4.25.0-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x"
        },
        "product_reference": "nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debuginfo-0:4.25.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64"
        },
        "product_reference": "nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debugsource-0:4.25.0-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64"
        },
        "product_reference": "nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debugsource-0:4.25.0-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686"
        },
        "product_reference": "nspr-debugsource-0:4.25.0-2.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debugsource-0:4.25.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le"
        },
        "product_reference": "nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debugsource-0:4.25.0-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x"
        },
        "product_reference": "nspr-debugsource-0:4.25.0-2.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-debugsource-0:4.25.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64"
        },
        "product_reference": "nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-devel-0:4.25.0-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64"
        },
        "product_reference": "nspr-devel-0:4.25.0-2.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-devel-0:4.25.0-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686"
        },
        "product_reference": "nspr-devel-0:4.25.0-2.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-devel-0:4.25.0-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le"
        },
        "product_reference": "nspr-devel-0:4.25.0-2.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-devel-0:4.25.0-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x"
        },
        "product_reference": "nspr-devel-0:4.25.0-2.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nspr-devel-0:4.25.0-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64"
        },
        "product_reference": "nspr-devel-0:4.25.0-2.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-0:3.53.1-11.el8_2.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src"
        },
        "product_reference": "nss-0:3.53.1-11.el8_2.src",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debuginfo-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debuginfo-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-debuginfo-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debuginfo-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debuginfo-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-debuginfo-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debuginfo-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debugsource-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-debugsource-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debugsource-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-debugsource-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debugsource-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debugsource-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-debugsource-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-debugsource-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-debugsource-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-devel-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-devel-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-devel-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-devel-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-devel-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-devel-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-devel-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-devel-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-devel-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-devel-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-softokn-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-softokn-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-softokn-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-softokn-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-softokn-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-devel-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-devel-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-softokn-devel-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-devel-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-devel-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-sysinit-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-sysinit-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-sysinit-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-tools-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-tools-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-tools-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-tools-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-util-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-util-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-util-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-util-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-util-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-devel-0:3.53.1-11.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64"
        },
        "product_reference": "nss-util-devel-0:3.53.1-11.el8_2.aarch64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-devel-0:3.53.1-11.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686"
        },
        "product_reference": "nss-util-devel-0:3.53.1-11.el8_2.i686",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-devel-0:3.53.1-11.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le"
        },
        "product_reference": "nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-devel-0:3.53.1-11.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x"
        },
        "product_reference": "nss-util-devel-0:3.53.1-11.el8_2.s390x",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nss-util-devel-0:3.53.1-11.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
        },
        "product_reference": "nss-util-devel-0:3.53.1-11.el8_2.x86_64",
        "relates_to_product_reference": "AppStream-8.2.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2019-11756",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-11-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1774835"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11756"
        },
        {
          "category": "external",
          "summary": "RHBZ#1774835",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756"
        },
        {
          "category": "external",
          "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes",
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes"
        }
      ],
      "release_date": "2019-12-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-08-03T13:04:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect. After installing this update, applications using NSPR (for example, Firefox) must be restarted for this update to take effect.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3280"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla Project"
          ]
        }
      ],
      "cve": "CVE-2019-17006",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2019-11-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1775916"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nss: Check length of inputs for cryptographic primitives",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17006"
        },
        {
          "category": "external",
          "summary": "RHBZ#1775916",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006"
        },
        {
          "category": "external",
          "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes",
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
        }
      ],
      "release_date": "2019-12-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-08-03T13:04:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect. After installing this update, applications using NSPR (for example, Firefox) must be restarted for this update to take effect.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3280"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nss: Check length of inputs for cryptographic primitives"
    },
    {
      "cve": "CVE-2019-17023",
      "discovery_date": "2020-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1791225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17023"
        },
        {
          "category": "external",
          "summary": "RHBZ#1791225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023"
        },
        {
          "category": "external",
          "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes",
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes"
        }
      ],
      "release_date": "2020-01-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-08-03T13:04:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect. After installing this update, applications using NSPR (for example, Firefox) must be restarted for this update to take effect.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3280"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Cesar Pereida Garcia",
            "Network and Information Security Group"
          ],
          "organization": "Tampere University",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2020-12399",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2020-04-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the DSA signature generation function in nss. During the process of generating a DSA signature, the nonce value \u0027k\u0027 is not padded, exposing the bit length. Combined with other techniques, this can result in the recovery of the DSA private key. The highest threat from this vulnerability is to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nss: Timing attack on DSA signature generation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A timing attack was found in the way NSS generated DSA signatures. A man-in-the-middle attacker could use this attack during DSA signature generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.\n\nFirefox and Thunderbird on Red Hat Enterprise Linux are built against the system nss library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-12399"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12399",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-12399"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12399",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12399"
        },
        {
          "category": "external",
          "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.4_release_notes",
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44.4_release_notes"
        },
        {
          "category": "external",
          "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52.1_release_notes",
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.52.1_release_notes"
        }
      ],
      "release_date": "2020-05-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-08-03T13:04:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect. After installing this update, applications using NSPR (for example, Firefox) must be restarted for this update to take effect.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3280"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nss: Timing attack on DSA signature generation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla Project"
          ]
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida",
            "Nicola Tuveri",
            "Yuval Yarom"
          ],
          "organization": "Network and Information Security Group (NISEC",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2020-12402",
      "cwe": {
        "id": "CWE-327",
        "name": "Use of a Broken or Risky Cryptographic Algorithm"
      },
      "discovery_date": "2020-04-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1826231"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nss: Side channel vulnerabilities during RSA key generation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
          "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-12402"
        },
        {
          "category": "external",
          "summary": "RHBZ#1826231",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-12402"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402"
        },
        {
          "category": "external",
          "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes",
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes"
        }
      ],
      "release_date": "2020-06-02T12:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-08-03T13:04:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, applications using NSS (for example, Firefox) must be restarted for this update to take effect. After installing this update, applications using NSPR (for example, Firefox) must be restarted for this update to take effect.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:3280"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debuginfo-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-debugsource-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nspr-devel-0:4.25.0-2.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.src",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-debugsource-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-softokn-freebl-devel-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-sysinit-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-tools-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-debuginfo-0:3.53.1-11.el8_2.x86_64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.aarch64",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.i686",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.ppc64le",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.s390x",
            "AppStream-8.2.0.Z.MAIN.EUS:nss-util-devel-0:3.53.1-11.el8_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nss: Side channel vulnerabilities during RSA key generation"
    }
  ]
}

CVE-2020-12399 (GCVE-0-2020-12399)

Vulnerability from cvelistv5 – Published: 2020-07-09 14:52 – Updated: 2024-08-04 11:56

Summary

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.

Severity ?

No CVSS data available.

CWE

Timing attack on DSA signatures in NSS library

Assigner

mozilla

References

8 references

URL	Tags
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_MISC
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_MISC
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1631576	x_refsource_MISC
https://www.debian.org/security/2020/dsa-4726	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/4421-1/	vendor-advisoryx_refsource_UBUNTU
https://security.gentoo.org/glsa/202007-49	vendor-advisoryx_refsource_GENTOO
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Impacted products

3 products

Vendor	Product	Version
Mozilla	Thunderbird	Affected: unspecified , < 68.9.0 (custom)
Mozilla	Firefox	Affected: unspecified , < 77 (custom)
Mozilla	Firefox ESR	Affected: unspecified , < 68.9 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.648Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-20/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-21/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-22/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631576"
          },
          {
            "name": "DSA-4726",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4726"
          },
          {
            "name": "USN-4421-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4421-1/"
          },
          {
            "name": "GLSA-202007-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-49"
          },
          {
            "name": "[debian-lts-announce] 20200929 [SECURITY] [DLA 2388-1] nss security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "68.9.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "77",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "68.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird \u003c 68.9.0, Firefox \u003c 77, and Firefox ESR \u003c 68.9."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Timing attack on DSA signatures in NSS library",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-29T21:06:18.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-20/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-21/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-22/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631576"
        },
        {
          "name": "DSA-4726",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4726"
        },
        {
          "name": "USN-4421-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4421-1/"
        },
        {
          "name": "GLSA-202007-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-49"
        },
        {
          "name": "[debian-lts-announce] 20200929 [SECURITY] [DLA 2388-1] nss security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-12399",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "68.9.0"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "77"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "68.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird \u003c 68.9.0, Firefox \u003c 77, and Firefox ESR \u003c 68.9."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Timing attack on DSA signatures in NSS library"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-20/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-20/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-21/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-21/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-22/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-22/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631576",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631576"
            },
            {
              "name": "DSA-4726",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4726"
            },
            {
              "name": "USN-4421-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4421-1/"
            },
            {
              "name": "GLSA-202007-49",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-49"
            },
            {
              "name": "[debian-lts-announce] 20200929 [SECURITY] [DLA 2388-1] nss security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-12399",
    "datePublished": "2020-07-09T14:52:16.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.648Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-17023 (GCVE-0-2019-17023)

Vulnerability from cvelistv5 – Published: 2020-01-08 21:30 – Updated: 2024-08-05 01:24

Summary

After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox < 72.

Severity ?

No CVSS data available.

CWE

NSS may negotiate TLS 1.2 or below after a TLS 1.3 HelloRetryRequest had been sent

Assigner

mozilla

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1590001	x_refsource_MISC
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_CONFIRM
https://usn.ubuntu.com/4234-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4397-1/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2020/dsa-4726	vendor-advisoryx_refsource_DEBIAN

Impacted products

1 product

Vendor	Product	Version
Mozilla	Firefox	Affected: before 72

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:24:48.748Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1590001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-01/"
          },
          {
            "name": "USN-4234-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4234-1/"
          },
          {
            "name": "USN-4397-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4397-1/"
          },
          {
            "name": "DSA-4726",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4726"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "status": "affected",
              "version": "before 72"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox \u003c 72."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "NSS may negotiate TLS 1.2 or below after a TLS 1.3 HelloRetryRequest had been sent",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-18T15:06:08.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1590001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-01/"
        },
        {
          "name": "USN-4234-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4234-1/"
        },
        {
          "name": "USN-4397-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4397-1/"
        },
        {
          "name": "DSA-4726",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4726"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-17023",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 72"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Firefox \u003c 72."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "NSS may negotiate TLS 1.2 or below after a TLS 1.3 HelloRetryRequest had been sent"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1590001",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1590001"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-01/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-01/"
            },
            {
              "name": "USN-4234-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4234-1/"
            },
            {
              "name": "USN-4397-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4397-1/"
            },
            {
              "name": "DSA-4726",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4726"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-17023",
    "datePublished": "2020-01-08T21:30:29.000Z",
    "dateReserved": "2019-09-30T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:24:48.748Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11756 (GCVE-0-2019-11756)

Vulnerability from cvelistv5 – Published: 2020-01-08 19:23 – Updated: 2024-08-04 23:03

Summary

Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox < 71.

Severity ?

No CVSS data available.

CWE

Use-after-free of SFTKSession object

Assigner

mozilla

References

2 references

URL	Tags
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_CONFIRM
https://bugzilla.mozilla.org/show_bug.cgi?id=1508776	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Mozilla	Firefox	Affected: before 71

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:03:32.815Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2019-36/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1508776"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "status": "affected",
              "version": "before 71"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox \u003c 71."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free of SFTKSession object",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-08T19:23:29.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2019-36/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1508776"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-11756",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 71"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox \u003c 71."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free of SFTKSession object"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2019-36/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2019-36/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1508776",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1508776"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-11756",
    "datePublished": "2020-01-08T19:23:29.000Z",
    "dateReserved": "2019-05-03T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:03:32.815Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-17006 (GCVE-0-2019-17006)

Vulnerability from cvelistv5 – Published: 2020-10-22 20:24 – Updated: 2024-08-05 01:24

Summary

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.

Severity ?

No CVSS data available.

CWE

missing length checks for cryptographic primitives

Assigner

mozilla

References

5 references

URL	Tags
https://developer.mozilla.org/en-US/docs/Mozilla/…	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1539788	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021012…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Mozilla	NSS	Affected: unspecified , < 3.46 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:24:48.804Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1539788"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210129-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "NSS",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "3.46",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "missing length checks for cryptographic primitives",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-12T06:05:28.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1539788"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210129-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2019-17006",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "NSS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "3.46"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "missing length checks for cryptographic primitives"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes",
              "refsource": "MISC",
              "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1539788",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1539788"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210129-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210129-0001/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04",
              "refsource": "MISC",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2019-17006",
    "datePublished": "2020-10-22T20:24:25.000Z",
    "dateReserved": "2019-09-30T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:24:48.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-12402 (GCVE-0-2020-12402)

Vulnerability from cvelistv5 – Published: 2020-07-09 14:53 – Updated: 2024-08-04 11:56

Summary

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox < 78.

Severity ?

No CVSS data available.

CWE

RSA Key Generation vulnerable to side-channel attack

Assigner

mozilla

References

13 references

URL	Tags
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1631597	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4417-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.debian.org/security/2020/dsa-4726	vendor-advisoryx_refsource_DEBIAN
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/202007-10	vendor-advisoryx_refsource_GENTOO
https://usn.ubuntu.com/4417-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 78 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2020-24/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631597"
          },
          {
            "name": "openSUSE-SU-2020:0953",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00016.html"
          },
          {
            "name": "openSUSE-SU-2020:0955",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00018.html"
          },
          {
            "name": "USN-4417-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4417-1/"
          },
          {
            "name": "openSUSE-SU-2020:0983",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html"
          },
          {
            "name": "DSA-4726",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4726"
          },
          {
            "name": "FEDORA-2020-3ef1937475",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UWVDJRARXNWWWTCGMM63EXLQHH2LNOXO/"
          },
          {
            "name": "openSUSE-SU-2020:1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html"
          },
          {
            "name": "GLSA-202007-10",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202007-10"
          },
          {
            "name": "USN-4417-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4417-2/"
          },
          {
            "name": "FEDORA-2020-16741ac7ff",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RFL6UNFK4MG2WDXLMLFAEIUSM5EUK7CG/"
          },
          {
            "name": "[debian-lts-announce] 20200929 [SECURITY] [DLA 2388-1] nss security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox \u003c 78."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "RSA Key Generation vulnerable to side-channel attack",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-29T21:06:17.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2020-24/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631597"
        },
        {
          "name": "openSUSE-SU-2020:0953",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00016.html"
        },
        {
          "name": "openSUSE-SU-2020:0955",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00018.html"
        },
        {
          "name": "USN-4417-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4417-1/"
        },
        {
          "name": "openSUSE-SU-2020:0983",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html"
        },
        {
          "name": "DSA-4726",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4726"
        },
        {
          "name": "FEDORA-2020-3ef1937475",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UWVDJRARXNWWWTCGMM63EXLQHH2LNOXO/"
        },
        {
          "name": "openSUSE-SU-2020:1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html"
        },
        {
          "name": "GLSA-202007-10",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202007-10"
        },
        {
          "name": "USN-4417-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4417-2/"
        },
        {
          "name": "FEDORA-2020-16741ac7ff",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RFL6UNFK4MG2WDXLMLFAEIUSM5EUK7CG/"
        },
        {
          "name": "[debian-lts-announce] 20200929 [SECURITY] [DLA 2388-1] nss security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2020-12402",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secret primes. *Note:* An unmodified Firefox browser does not generate RSA keys in normal operation and is not affected, but products built on top of it might. This vulnerability affects Firefox \u003c 78."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "RSA Key Generation vulnerable to side-channel attack"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2020-24/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2020-24/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631597",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1631597"
            },
            {
              "name": "openSUSE-SU-2020:0953",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00016.html"
            },
            {
              "name": "openSUSE-SU-2020:0955",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00018.html"
            },
            {
              "name": "USN-4417-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4417-1/"
            },
            {
              "name": "openSUSE-SU-2020:0983",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html"
            },
            {
              "name": "DSA-4726",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4726"
            },
            {
              "name": "FEDORA-2020-3ef1937475",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UWVDJRARXNWWWTCGMM63EXLQHH2LNOXO/"
            },
            {
              "name": "openSUSE-SU-2020:1017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html"
            },
            {
              "name": "GLSA-202007-10",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202007-10"
            },
            {
              "name": "USN-4417-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4417-2/"
            },
            {
              "name": "FEDORA-2020-16741ac7ff",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RFL6UNFK4MG2WDXLMLFAEIUSM5EUK7CG/"
            },
            {
              "name": "[debian-lts-announce] 20200929 [SECURITY] [DLA 2388-1] nss security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2020-12402",
    "datePublished": "2020-07-09T14:53:22.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2020_3280

CVE-2020-12399 (GCVE-0-2020-12399)

CVE-2019-17023 (GCVE-0-2019-17023)

CVE-2019-11756 (GCVE-0-2019-11756)

CVE-2019-17006 (GCVE-0-2019-17006)

CVE-2020-12402 (GCVE-0-2020-12402)

Tags

Sightings

Nomenclature