============================================================================ Ubuntu Security Notice USN-1540-1 August 16, 2012 nss vulnerability ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS Summary: NSS could be made to crash if it opened a specially crafted certificate. Software Description: - nss: Network Security Service library Details: Kaspar Brand discovered a vulnerability in how the Network Security Services (NSS) ASN.1 decoder handles zero length items. If the user were tricked into opening a specially crafted certificate, an attacker could possibly exploit this to cause a denial of service via application crash. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: libnss3-1d 3.12.9+ckbi-1.82-0ubuntu6.1 Ubuntu 11.04: libnss3-1d 3.12.9+ckbi-1.82-0ubuntu2.2 Ubuntu 10.04 LTS: libnss3-1d 3.12.9+ckbi-1.82-0ubuntu0.10.04.4 After a standard system update you need to restart any applications that use NSS, such as Evolution, to make all the necessary changes. References: http://www.ubuntu.com/usn/usn-1540-1 CVE-2012-0441 Package Information: https://launchpad.net/ubuntu/+source/nss/3.12.9+ckbi-1.82-0ubuntu6.1 https://launchpad.net/ubuntu/+source/nss/3.12.9+ckbi-1.82-0ubuntu2.2 https://launchpad.net/ubuntu/+source/nss/3.12.9+ckbi-1.82-0ubuntu0.10.04.4