Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 8 Jessie: DLA-2015-1 Moderate: NSS Denial-of-Service Issue

debian lts
Calendar Grey November 29, 2019
Dist Debian Esm H88
Upgrade the nss package in Debian 8 Jessie to address the CERT_DecodeCertPackage() Denial-of-Service vulnerability by following crucial steps to ensure security
Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may haved crash with a NULL deref leading to a Denial-of-Service
Topics%20covered

Topics Covered

security advisory security issue software update Debian Denial-of-Service nss CERT_DecodeCertPackage

Summary

For Debian 8 "Jessie", this problem has been fixed in version
2:3.26-1+debu8u8.

We recommend that you upgrade your nss packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

--

mike gabriel aka sunweaver (Debian Developer)
fon: +49 (1520) 1976 148

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, https://sunweavers.net/



Severity
important
Lowest
Low
Medium
High
Critical

<pre><font face="Courier">Package: nss
Version: 2:3.26-1+debu8u8
CVE ID: CVE-2019-17007
Debian Bug:

Topics%20covered

Topics Covered

security advisory security issue software update Debian Denial-of-Service nss CERT_DecodeCertPackage

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here