USN-4215-1: NSS vulnerability
9 December 2019
NSS could be made to crash if it received a specially crafted certificate.
Releases
Packages
- nss - Network Security Service library
Details
It was discovered that NSS incorrectly handled certain certificates.
An attacker could possibly use this issue to cause a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 19.04
Ubuntu 18.04
Ubuntu 16.04
Ubuntu 14.04
-
libnss3
-
2:3.28.4-0ubuntu0.14.04.5+esm3
Available with Ubuntu Pro
Ubuntu 12.04
After a standard system update you need to reboot your computer to make
all the necessary changes.