Errata ID | 361 |
---|---|
Date | 2015-08-21 |
Source package | nss |
Fixed in version | 3.12.8-1.28.201508172244 |
Description | Multiple vulnerabilities have been fixed in the Mozilla nss library: * Error in the CBC modes of the TLS implementation (CVE-2011-3389) * Denial of service in certificate parsing (CVE-2013-1741) * Incomplete rejection of invalid certificates (CVE-2013-5606) * Insecure DH key exchange (CVE-2014-1491) * Incorrect wildcard parsing in internationalised domain names (CVE-2014-1492) * Use-after-free in certificate handling (CVE-2014-1544) * Incorrect parsing of ASN.1 data can result in signature forgery (CVE-2014-1568) * ASN.1 DER decoding of lengths is too permissive (CVE-2014-1569) |
Additional notes | |
CVE ID | CVE-2011-3389 CVE-2013-1741 CVE-2013-5606 CVE-2014-1491 CVE-2014-1492 CVE-2014-1544 CVE-2014-1568 CVE-2014-1569 |
UCS Bug number | #33281 |