title: Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update
description: nss: NULL pointer dereference in several CMS functions resulting in a denial of service nss: Out-of-bounds read when importing curve25519 private key nss: PKCS#1 v1.5 signatures can be used for TLS 1.3 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS
cpes: cpe:/a:redhat:enterprise_linux:8::appstream