{"id":"CLSA-2021-1638804170","summary":"Fixed CVE-2021-43527 in nss","details":"- CVE-2021-43527: Fix memory corruption in decodeECorDsaSignature with DSA \n  signatures (and RSA-PSS)\n- Update to CKBI 2.50 from NSS 3.67\n-    Removing:\n-     # Certificate \"Verisign Class 3 Public Primary Certification Authority - G3\"\n-     # Certificate \"AddTrust Low-Value Services Root\"\n-     # Certificate \"AddTrust External Root\"\n-     # Certificate \"GeoTrust Global CA\"\n-     # Certificate \"GeoTrust Universal CA\"\n-     # Certificate \"GeoTrust Universal CA 2\"\n-     # Certificate \"QuoVadis Root CA\"\n-     # Certificate \"Sonera Class 2 Root CA\"\n-     # Certificate \"UTN USERFirst Email Root CA\"\n-     # Certificate \"Taiwan GRCA\"\n-     # Certificate \"Certplus Class 2 Primary CA\"\n-     # Certificate \"GeoTrust Primary Certification Authority\"\n-     # Certificate \"thawte Primary Root CA\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G5\"\n-     # Certificate \"Deutsche Telekom Root CA 2\"\n-     # Certificate \"GeoTrust Primary Certification Authority - G3\"\n-     # Certificate \"thawte Primary Root CA - G2\"\n-     # Certificate \"thawte Primary Root CA - G3\"\n-     # Certificate \"GeoTrust Primary Certification Authority - G2\"\n-     # Certificate \"VeriSign Universal Root Certification Authority\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G4\"\n-     # Certificate \"Staat der Nederlanden Root CA - G2\"\n-     # Certificate \"Trustis FPS Root CA\"\n-     # Certificate \"EE Certification Centre Root CA\"\n-     # Certificate \"Swisscom Root CA 2\"\n-     # Certificate \"Certinomis - Root CA\"\n-     # Certificate \"LuxTrust Global Root 2\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority - G4\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority - G4\"\n-    Adding:\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Microsoft ECC Root Certificate Authority 2017\"\n-     # Certificate \"Microsoft RSA Root Certificate Authority 2017\"\n-     # Certificate \"e-Szigno Root CA 2017\"\n-     # Certificate \"certSIGN Root CA G2\"\n-     # Certificate \"Trustwave Global Certification Authority\"\n-     # Certificate \"Trustwave Global ECC P256 Certification Authority\"\n-     # Certificate \"Trustwave Global ECC P384 Certification Authority\"\n-     # Certificate \"NAVER Global Root Certification Authority\"\n-     # Certificate \"AC RAIZ FNMT-RCM SERVIDORES SEGUROS\"\n-     # Certificate \"GlobalSign Secure Mail Root R45\"\n-     # Certificate \"GlobalSign Secure Mail Root E45\"\n-     # Certificate \"GlobalSign Root R46\"\n-     # Certificate \"GlobalSign Root E46\"\n-     # Certificate \"GLOBALTRUST 2020\"\n-     # Certificate \"ANF Secure Server Root CA\"\n-     # Certificate \"Certum EC-384 CA\"\n-     # Certificate \"Certum Trusted Root CA\"\n- revert last change. Patch was for nss-softokn\n- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)","modified":"2026-05-27T11:18:32.111009219Z","published":"2021-12-06T15:22:50Z","upstream":["CVE-2021-43527"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ol6/CLSA-2021-1638804170.html"}],"affected":[{"package":{"name":"nss","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/nss?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1638804170.json"}},{"package":{"name":"nss-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/nss-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1638804170.json"}},{"package":{"name":"nss-pkcs11-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/nss-pkcs11-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1638804170.json"}},{"package":{"name":"nss-sysinit","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/nss-sysinit?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1638804170.json"}},{"package":{"name":"nss-tools","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/nss-tools?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1638804170.json"}}],"schema_version":"1.7.5"}