------------------------------------------------------------------------- Debian LTS Advisory DLA-4729-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof August 10, 2026 https://wiki.debian.org/LTS -------------------------------------------------------------------------
Package : nss Version : 3.61-1+deb11u7 2:3.87.1-1+deb12u4 CVE ID : CVE-2026-16389 Tomoya Nakanishi discovered a flaw in nss, the Mozilla Network Security Service library, which may result in execution of arbitrary code if a specially crafted certificate is processed. For Debian 11 bullseye, this problem has been fixed in version 3.61-1+deb11u7. For Debian 12 bookworm, this problem has been fixed in version 2:3.87.1-1+deb12u4. We recommend that you upgrade your nss packages. For the detailed security status of nss please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nss Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS
signature.asc
Description: PGP signature
