Vulnerability Bulletins |
DSA-3071 nss - security update |
|
| Affected software | Debian |
|
In nss, a set of libraries designed to support cross-platformdevelopment of security-enabled client and server applications, TysonSmith and Jesse Schwartzentruber discovered a use-after-freevulnerability that allows remote attackers to execute arbitrary code bytriggering the improper removal of an NSSCertificate structure from atrust domain. More info: https://www.debian.org/security/2014/dsa-3071 |
|