Ubuntu: 2452-1 Moderate: NSS Network Exposure Vulnerability

ubuntu

January 7, 2015

NSS could be made to expose sensitive information over the network.

Summary

NSS could be made to expose sensitive information over the network.

Software Description:

- nss: Network Security Service library

Details:

It was discovered that NSS incorrectly handled certain ASN.1 lengths. A

remote attacker could possibly use this issue to perform a data-smuggling

attack.

Topics Covered

security advisory information exposure ubuntu data leak network security service

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  libnss3                         2:3.17.1-0ubuntu1.1

Ubuntu 14.04 LTS:
  libnss3                         2:3.17.1-0ubuntu0.14.04.2

Ubuntu 12.04 LTS:
  libnss3                         3.17.1-0ubuntu0.12.04.2

Ubuntu 10.04 LTS:
  libnss3-1d                      3.17.1-0ubuntu0.10.04.2

After a standard system update you need to restart any applications
that use NSS, such as Evolution and Chromium, to make all the necessary
changes.