USN-4397-2: NSS vulnerability
USN-4397-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida Garcia discovered that NSS incorrectly handled DSA key generation. A local attacker could possibly use this issue to perform a timing attack and recover DSA keys. (CVE-2020-12399)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.28.4-0ubuntu0.14.04.5+esm5 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.28.4-0ubuntu0.12.04.8 - Upgrade
Upgrade
NSSto a version that resolves this vulnerability.Patch USN-4397-1 - Upgrade
Upgrade
NSSto a version that resolves this vulnerability.Patch USN-4397-2
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is USN-4397-2.
What is the severity of USN-4397-2?
The severity of USN-4397-2 is not mentioned in the provided information.
What software is affected by USN-4397-2?
Ubuntu 12.04 ESM and Ubuntu 14.04 ESM with libnss3 version 2:3.28.4-0ubuntu0.14.04.5+esm5 and libnss3 version 2:3.28.4-0ubuntu0.12.04.8 are affected.
How can I fix USN-4397-2?
To fix USN-4397-2, update the libnss3 package to version 2:3.28.4-0ubuntu0.14.04.5+esm5 for Ubuntu 14.04 ESM and version 2:3.28.4-0ubuntu0.12.04.8 for Ubuntu 12.04 ESM.
Where can I find more information about USN-4397-2?
You can find more information about USN-4397-2 on the Ubuntu Security Notices website.