Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.
{ "binaries": [ { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm12", "binary_name": "libnss3" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm12", "binary_name": "libnss3-1d" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm12", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm12", "binary_name": "libnss3-nssdb" }, { "binary_version": "2:3.28.4-0ubuntu0.14.04.5+esm12", "binary_name": "libnss3-tools" } ] }
{ "binaries": [ { "binary_version": "2:3.28.4-0ubuntu0.16.04.14+esm4", "binary_name": "libnss3" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.14+esm4", "binary_name": "libnss3-1d" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.14+esm4", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.14+esm4", "binary_name": "libnss3-nssdb" }, { "binary_version": "2:3.28.4-0ubuntu0.16.04.14+esm4", "binary_name": "libnss3-tools" } ] }
{ "binaries": [ { "binary_version": "121.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox" }, { "binary_version": "121.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox-dev" }, { "binary_version": "121.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox-geckodriver" }, { "binary_version": "121.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox-mozsymbols" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2:3.98-0ubuntu0.20.04.1", "binary_name": "libnss3" }, { "binary_version": "2:3.98-0ubuntu0.20.04.1", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.98-0ubuntu0.20.04.1", "binary_name": "libnss3-tools" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "2:3.98-0ubuntu0.22.04.1", "binary_name": "libnss3" }, { "binary_version": "2:3.98-0ubuntu0.22.04.1", "binary_name": "libnss3-dev" }, { "binary_version": "2:3.98-0ubuntu0.22.04.1", "binary_name": "libnss3-tools" } ], "availability": "No subscription required" }