tocsin

Debian/nss: high 8.8

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110,

Action: Upgrade nss to 2:3.87.1-1 or later.

Affected

introducedfixedlast affected
02:3.87.1-1-

Fixed versions

2:3.87.1-1

Sources

published · modified · JSON