Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-927-2: NSS regression

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-927-2: NSS regression
# 1  
Old 04-11-2010
USN-927-2: NSS regression
Description:
===========================================================Ubuntu Security Notice USN-927-2 April 11, 2010nss regressionhttps://launchpad.net/bugs/559881===========================================================A security issue affects the following Ubuntu releases:Ubuntu 9.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 9.10: libnss3-1d 3.12.6-0ubuntu0.9.10.2After a standard system upgrade you need to restart your session to effectthe necessary changes.Details follow:USN-927-1 fixed vulnerabilities in NSS. Upstream NSS 3.12.6 added anadditional checksum verification on libnssdbm3.so, but the Ubuntu packagingdid not create this checksum. As a result, Firefox could not initialize thesecurity component when the NSS Internal FIPS PKCS #11 Module was enabled.This update fixes the problem.We apologize for the inconvenience.Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds support for the new new renegotiation extension and will use it when the server supports it.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

byobu-launcher-uninstall

byobu-launcher-uninstall(1)					       byobu					       byobu-launcher-uninstall(1)

NAME

       byobu-launcher-uninstall - Byobu Launcher uninstallation utility

SYNOPSIS

       byobu-launcher-uninstall

DESCRIPTION

       byobu-launcher-uninstall(1)  is	a  simple  utilty  that  removes  the line added to your $HOME/.profile by byobu-launcher-install(1) which
       launches byobu(1) any time you login through ssh(1) or on a console(4).

SEE ALSO

       screen(1), byobu(1), ssh(1), console(4), byobu-launcher-install(1)

       http://launchpad.net/byobu

AUTHOR

       This manpage and the utility were written by Dustin Kirkland <kirkland@ubuntu.com> for Ubuntu systems (but may be used by others).  Permis-
       sion  is granted to copy, distribute and/or modify this document and the utility under the terms of the GNU General Public License, Version
       3 published by the Free Software Foundation.

       The complete text of the GNU General Public License can	be  found  in  /usr/share/common-licenses/GPL  on  Debian/Ubuntu  systems,  or	in
       /usr/share/doc/fedora-release-*/GPL on Fedora systems, or on the web at http://www.gnu.org/licenses/gpl.txt.

byobu								    3 Jan 2010					       byobu-launcher-uninstall(1)