Score:1

How I resolve the CVE-2021-43527 on ubuntu 20.04

is flag

I am using ubuntu version "20.04.3 LTS (Focal Fossa)" where facing CVE-2021-43527 (NSS) vulnerability, no public network on the VM. In the link its mentioned that this vulnerability fixed in 2:3.49.1-1ubuntu1.6. Please help me how can I upgrade this version or how to resolve mentioned vulnerability from my VM.

us flag
Connect to internet, and run the commands `sudo apt update` and `sudo apt dist-upgrade`. That should apply all the updates.
muru avatar
us flag
Or host a mirror or proxy in your internal network which can be accessed by your VM.
muru avatar
us flag
Does this answer your question? [Updating/patching an airgapped Ubuntu server](https://askubuntu.com/questions/895732/updating-patching-an-airgapped-ubuntu-server) Or https://askubuntu.com/questions/1015264/how-can-i-update-an-offline-ubuntu-machine-no-internet-at-all
guiverc avatar
cn flag
You've provided no link (but make reference to one); I gather it's https://ubuntu.com/security/CVE-2021-43527
mchid avatar
bo flag
Version 2:3.49.1-1ubuntu1.6 is the source package nss and not the package you would install. The following packages are built from the nss source: `libnss3 libnss3-dev libnss3-tools`. If the machine doesn't have access to the internet, you can download the packages (deb files) [from here](https://packages.ubuntu.com/search?suite=focal&section=all&arch=any&keywords=libnss&searchon=names) and install them using `sudo apt install ./packagename.deb` in the same directory as the downloaded pacakge.
mchid avatar
bo flag
There are other security updates listed on the same page. Look for any packages that show "security" in the description if they are installed on your computer. Of course, simply downloading the packages may not work as you may encounter dependency issues. However, these are mostly libs so keep your fingers crossed there are no problems and hopefully it will work. If not, you can always download the necessary dependencies and install those and then try again.
is flag
Thanks mchid, I have downloaded the nss_3.49.1.orig(1).tar file from your mentioned link. But can you help me how I Install this tar package.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.