[SECURITY] [DSA 6403-1] nss security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6403-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
July 29, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : nss
CVE ID : CVE-2026-16389
Tomoya Nakanishi discovered a flaw in nss, the Mozilla Network Security
Service library, which may result in execution of arbitrary code if a
specially crafted certificate is processed.
For the stable distribution (trixie), this problem has been fixed in
version 2:3.110-1+deb13u4.
We recommend that you upgrade your nss packages.
For the detailed security status of nss please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/nss
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=S0QN
-----END PGP SIGNATURE-----
Reply to: