Ubuntu alert USN-8481-1 (nss)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8481-1] NSS vulnerability
Date:
             
 
Mon, 29 Jun 2026 20:33:06 +0000
Message-ID:
             
 
<E1weIfC-0001ir-FI@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8481-1
June 29, 2026

nss vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

NSS could be made to crash or expose sensitive information if it received
specially crafted input.

Software Description:
- nss: Network Security Service library

Details:

Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11
URI escape sequences. An attacker could possibly use this issue to cause
NSS to crash, resulting in a denial of service, or obtain sensitive
information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libnss3                         2:3.120-1ubuntu2.1

Ubuntu 25.10
  libnss3                         2:3.114-1ubuntu0.2

Ubuntu 24.04 LTS
  libnss3                         2:3.98-1ubuntu0.2

Ubuntu 22.04 LTS
  libnss3                         2:3.98-0ubuntu0.22.04.4

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8481-1
  CVE-2026-12318

Package Information:
  https://launchpad.net/ubuntu/+source/nss/2:3.120-1ubuntu2.1
  https://launchpad.net/ubuntu/+source/nss/2:3.114-1ubuntu0.2
  https://launchpad.net/ubuntu/+source/nss/2:3.98-1ubuntu0.2
  https://launchpad.net/ubuntu/+source/nss/2:3.98-0ubuntu0....


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=0hSl
-----END PGP SIGNATURE-----