Oval Definition:	oval:com.ubuntu.cosmic:def:2019117270000000
Revision Date: 2019-07-11 Version: 1 Title: CVE-2019-11727 on Ubuntu 18.10 (cosmic) - medium. Description: A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-11727 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information firefox package in cosmic was vulnerable but has been fixed (note: '68.0+build3-0ubuntu0.18.10.1'). OR mozjs52: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR mozjs60: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR nss: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR thunderbird: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
BACK