StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · nss

`nss` CVE matrix across Linux distros

279 CVEs tracked across 8 distro releases. Showing the 200 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2009-2404→ fixed in3.12.3-1
CVE-2009-2408→ fixed in3.12.3-1
CVE-2009-2409→ fixed in3.12.3-1
CVE-2009-3555→ fixed in3.12.6-1
CVE-2010-3170→ fixed in3.12.8-1
CVE-2010-3173→ fixed in3.12.8-1
CVE-2011-3389→ fixed in3.13.1.with.ckbi.1.88-1
CVE-2011-3640→ fixed in3.13.1.with.ckbi.1.88-1
+49 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y nss

Debian bookworm

Source: Debian

CVE-2009-2404→ fixed in3.12.3-1
CVE-2009-2408→ fixed in3.12.3-1
CVE-2009-2409→ fixed in3.12.3-1
CVE-2009-3555→ fixed in3.12.6-1
CVE-2010-3170→ fixed in3.12.8-1
CVE-2010-3173→ fixed in3.12.8-1
CVE-2011-3389→ fixed in3.13.1.with.ckbi.1.88-1
CVE-2011-3640→ fixed in3.13.1.with.ckbi.1.88-1
+49 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y nss

Debian trixie

Source: Debian

CVE-2009-2404→ fixed in3.12.3-1
CVE-2009-2408→ fixed in3.12.3-1
CVE-2009-2409→ fixed in3.12.3-1
CVE-2009-3555→ fixed in3.12.6-1
CVE-2010-3170→ fixed in3.12.8-1
CVE-2010-3173→ fixed in3.12.8-1
CVE-2011-3389→ fixed in3.13.1.with.ckbi.1.88-1
CVE-2011-3640→ fixed in3.13.1.with.ckbi.1.88-1
+49 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y nss

Alpine v3.20

Source: Alpine secdb

CVE-2018-12384→ fixed in3.39-r0
CVE-2018-12404→ fixed in3.41-r0
CVE-2019-11745→ fixed in3.47.1-r0
CVE-2019-17023→ fixed in3.49-r0
CVE-2020-12400→ fixed in3.55-r0
CVE-2020-12401→ fixed in3.55-r0

Single command to patch all of these:

apk add --upgrade nss

Alpine v3.21

Source: Alpine secdb

CVE-2018-12384→ fixed in3.39-r0
CVE-2018-12404→ fixed in3.41-r0
CVE-2019-11745→ fixed in3.47.1-r0
CVE-2019-17023→ fixed in3.49-r0
CVE-2020-12400→ fixed in3.55-r0
CVE-2020-12401→ fixed in3.55-r0

Single command to patch all of these:

apk add --upgrade nss

Alpine edge

Source: Alpine secdb

CVE-2018-12384→ fixed in3.39-r0
CVE-2018-12404→ fixed in3.41-r0
CVE-2019-11745→ fixed in3.47.1-r0
CVE-2019-17023→ fixed in3.49-r0
CVE-2020-12400→ fixed in3.55-r0
CVE-2020-12401→ fixed in3.55-r0

Single command to patch all of these:

apk add --upgrade nss

Alpine v3.18

Source: Alpine secdb

CVE-2018-12384→ fixed in3.39-r0
CVE-2018-12404→ fixed in3.41-r0
CVE-2019-11745→ fixed in3.47.1-r0
CVE-2019-17023→ fixed in3.49-r0
CVE-2020-12400→ fixed in3.55-r0
CVE-2020-12401→ fixed in3.55-r0

Single command to patch all of these:

apk add --upgrade nss

Alpine v3.19

Source: Alpine secdb

CVE-2018-12384→ fixed in3.39-r0
CVE-2018-12404→ fixed in3.41-r0
CVE-2019-11745→ fixed in3.47.1-r0
CVE-2019-17023→ fixed in3.49-r0
CVE-2020-12400→ fixed in3.55-r0

Single command to patch all of these:

apk add --upgrade nss

Is YOUR nss patched?

5-second check on your actual server. The quickscan reads your installed nss version and matches against the same 279-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)