Ubuntu Security Update USN-4203-2: NSS vulnerability

LinuxBot

Member
Joined
Apr 25, 2017
Messages
6,781
Reaction score
94
Credits
-1,257
nss vulnerability


A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 14.04 ESM
  • Ubuntu 12.04 ESM
Summary


NSS could be made to crash or run programs if it received specially crafted input.

Software Description

  • nss - Network Security Service library
Details


USN-4203-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.

Update instructions


The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.04 ESM
libnss3 - 2:3.28.4-0ubuntu0.14.04.5+esm2
Ubuntu 12.04 ESM
libnss3 - 2:3.28.4-0ubuntu0.12.04.5

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to restart any applications that use NSS, such as Evolution, to make all the necessary changes.

References


Continue reading...
 


Follow Linux.org

Members online


Latest posts

Top