Page 1 of 1

Debian 11 DLA-4508-1 NSS Integer Overflow CVE-2026-2781

Posted: Wed Mar 25, 2026 9:03 pm
by admin
Clay Ver Valen discovered an integer overflow in the AES-GCM implementation of the Mozilla Network Security Service libraries. For Debian 11 bullseye, this problem has been fixed in version 2:3.61-1+deb11u5. We recommend that you upgrade your nss packages.

Source: https://linuxsecurity.com/advisories/de ... 4508-1-nss