nss-softokn-3.90.0-6.0.1.el7.AXS7

Network Security Services Softoken Cryptographic Module

Security fix(es):

- CVE-2023-5388: fix timing attack against RSA decryption
- Bug 1784253: avoid processing unexpected inputs by checking for m_exptmod base
sign
- Bug 1911912: avoid misuse of ctype(3) functions

CVE(s):
CVE-2023-5388
NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.