-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : nss CVE ID : CVE-2026-16389 Tomoya Nakanishi discovered a flaw in nss, the Mozilla Network Security Service library, which may result in execution of arbitrary code if a specially crafted certificate is processed. For the stable distribution (trixie), this problem has been fixed in version 2:3.110-1+deb13u4. We recommend that you upgrade your nss packages. For the detailed security status of nss please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nss Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmpqWvRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QhTw//Y6Z/nSMqE1+f9vx9FZHuytyxMhc2cWH+jZX5CjrCThtaEuK6z6EdZsTz GDoFEfj9b3FkBYjro8l94z9/HLIlqiWA+2mZmEKmN/8jEtk3foUdr7kDs6ozX1r3 9++m91Y0weGAvgu4g1XqkGGTDt8pZ8wYWydLN3yeFSKXxosy+H5e3tvpwRBGNuPN oKmXNPLxFeRP6N6mXogNoiwnUIqhnAsYIM0akCnYeLThdcP4iOUfK4ybRCG/RLmq QA0z+8/pACNVeGyDi/jKEgd8EbqaRyBMQORgbmmwQSRc1SFQV4kNodQPYO0pgLK1 t2Fme/8sJkseckU+CxwflT9hzJaTBSJCXRTzibijx3IfV5Rjqxt3ZzkfxJ/FR2UT EPv6fAerRfZCfZY0oU5h0p9nVb5JTNi2KLhB7xRJKJVs5bgug9bsPW3SV2GiEsD5 oWma1RzvUFaLKUjZSY/4MOI/m4CxSQPDeBJEUsb7T9mMIkQ0KVZTCH8z5SGVeDY/ DMa/mT1LTqoi58zFiB2lsh9lixix2W7GVhx41VzToXDcgNgkLqlq6Ymmj8bmyZOq AnhTNsF9cyV6Sdd0vuUKLDBRLFQlEXQT0Pact7kLdLFLwtvnob7vWRaOJU3Qoad5 MUZHnPHIXk/CcaISkiB/PeGkba6V5O/S26s71ACUiMGP64GydXY= =S0QN -----END PGP SIGNATURE-----
