Errata overview
Errata ID 361
Date 2015-08-21
Source package nss
Fixed in version 3.12.8-1.28.201508172244
Description
Multiple vulnerabilities have been fixed in the Mozilla nss library:
* Error in the CBC modes of the TLS implementation (CVE-2011-3389)
* Denial of service in certificate parsing (CVE-2013-1741)
* Incomplete rejection of invalid certificates (CVE-2013-5606)
* Insecure DH key exchange (CVE-2014-1491)
* Incorrect wildcard parsing in internationalised domain names
  (CVE-2014-1492)
* Use-after-free in certificate handling (CVE-2014-1544)
* Incorrect parsing of ASN.1 data can result in signature forgery
  (CVE-2014-1568)
* ASN.1 DER decoding of lengths is too permissive (CVE-2014-1569)
Additional notes
CVE ID CVE-2011-3389
CVE-2013-1741
CVE-2013-5606
CVE-2014-1491
CVE-2014-1492
CVE-2014-1544
CVE-2014-1568
CVE-2014-1569
UCS Bug number #33281