Debian alert DLA-4694-1 (nss)

From:
             
 
Jochen Sprickerhof <jspricke@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4694-1] nss security update
Date:
             
 
Wed, 22 Jul 2026 11:40:51 +0200
Message-ID:
             
 
<amCQI_ffIGxtnRw7@fenchel>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4694-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                   Jochen Sprickerhof
July 22, 2026                                 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : nss
Version        : 2:3.61-1+deb11u6 2:3.87.1-1+deb12u3
CVE ID         : CVE-2026-6766 CVE-2026-6767 CVE-2026-6772 CVE-2026-12318
Debian Bug     : 

Several vulnerabilities were discovered in NSS, a set of cryptographic
libraries, which may result in or denial of service or potentially the
execution of arbitrary code.

For Debian 11 bullseye, these problems have been fixed in version
2:3.61-1+deb11u6.

For Debian 12 bookworm, these problems have been fixed in version
2:3.87.1-1+deb12u3.

We recommend that you upgrade your nss packages.

For the detailed security status of nss please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/nss

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=bWzI
-----END PGP SIGNATURE-----