Ubuntu 26.04 LTS NSS Important Denial of Service Risk USN-8481-1

ubuntu

June 29, 2026

NSS could be made to crash or expose sensitive information if it received specially crafted input.

Summary

NSS could be made to crash or expose sensitive information if it received

specially crafted input.

Software Description:

- nss: Network Security Service library

Details:

Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11

URI escape sequences. An attacker could possibly use this issue to cause

NSS to crash, resulting in a denial of service, or obtain sensitive

information.

Topics Covered

security advisory denial of service Ubuntu important sensitive data NSS

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libnss3                         2:3.120-1ubuntu2.1

Ubuntu 25.10
  libnss3                         2:3.114-1ubuntu0.2

Ubuntu 24.04 LTS
  libnss3                         2:3.98-1ubuntu0.2

Ubuntu 22.04 LTS
  libnss3                         2:3.98-0ubuntu0.22.04.4

In general, a standard system update will make all the necessary changes.