Executive Summary

Summary
Title NSPR update
Informations
Name USN-1763-2 First vendor Publication 2013-03-14
Vendor Ubuntu Last vendor Modification 2013-03-14
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score Not Defined Attack Range Not Defined
Cvss Impact Score Not Defined Attack Complexity Not Defined
Cvss Expoit Score Not Defined Authentication Not Defined
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 10.04 LTS

Summary:

NSPR update to work with the new NSS.

Software Description: - nspr: NetScape Portable Runtime Library

Details:

USN-1763-1 fixed a vulnerability in NSS. This update provides the NSPR needed to use the new NSS.

Original advisory details:

Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used
in NSS was vulnerable to a timing side-channel attack known as the
"Lucky Thirteen" issue. A remote attacker could use this issue to perform
plaintext-recovery attacks via analysis of timing data.

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.10:
libnspr4 4.9.5-0ubuntu0.12.10.1

Ubuntu 12.04 LTS:
libnspr4 4.9.5-0ubuntu0.12.04.1

Ubuntu 11.10:
libnspr4 4.9.5-0ubuntu0.11.10.1

Ubuntu 10.04 LTS:
libnspr4-0d 4.9.5-0ubuntu0.10.04.1

After a standard system update you need to restart any applications that use NSPR, such as Evolution and Chromium, to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1763-2
http://www.ubuntu.com/usn/usn-1763-1
https://launchpad.net/bugs/1155295

Package Information:
https://launchpad.net/ubuntu/+source/nspr/4.9.5-0ubuntu0.12.10.1
https://launchpad.net/ubuntu/+source/nspr/4.9.5-0ubuntu0.12.04.1
https://launchpad.net/ubuntu/+source/nspr/4.9.5-0ubuntu0.11.10.1
https://launchpad.net/ubuntu/+source/nspr/4.9.5-0ubuntu0.10.04.1

Original Source

Url : http://www.ubuntu.com/usn/USN-1763-2

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2014-02-17 12:01:41
  • Multiple Updates
2013-03-14 21:17:37
  • First insertion