vulnerability

Ubuntu: USN-2903-2: NSS regression

Try Surface Command
Back to search
Severity
9
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:N)
Published
Feb 23, 2016
Added
Feb 23, 2016
Modified
Feb 19, 2025

Description

USN-2903-1 fixed a vulnerability in NSS. An incorrect package versioning change in Ubuntu 12.04 LTS caused a regression when building software against NSS. This update fixes the problem.


We apologize for the inconvenience.


Original advisory details:


Hanno Böck discovered that NSS incorrectly handled certain division functions, possibly leading to cryptographic weaknesses. (CVE-2016-1938) This update also refreshes the NSS package to version 3.21 which includes the latest CA certificate bundle, and removes the SPI CA.

Solution

ubuntu-upgrade-libnss3-dev

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today