Canonical has published details about the NSS vulnerability in Ubuntu 14.10, Ubuntu 14.04 LTS, Ubuntu 12.04 LTS, and Ubuntu 10.04 LTS operating systems . The vulnerability has been successfully identified and patched.
A minor update has been released to fix the NSS (Network Security Service library) vulnerability, which could be exploited, exposing sensitive information over the network.
According to the company's announcement, "It was discovered that the Network Security Service library incorrectly handled certain ASN.1 lengths, which could allow remote attackers to exploit the vulnerability to gain unauthorized access."
Users will need to update their operating system to fix this vulnerability. As usual, you can do this via Update Manager or by opening a terminal and typing the following commands:
CODE
sudo apt-get update
sudo apt-get dist-upgrade
Generally, a standard system update will make all the necessary changes. You won't need to restart your computer to apply this fix, but any applications that use the Network Security Service library will need to be restarted.
