Vulnerability Bulletins

DSA-3034 iceweasel - security update

   
Affected software Debian
 
Antoine Delignat-Lavaud from Inria discovered an issue in the way NSS(the Mozilla Network Security Service library, embedded in WheezysIceweasel package), was parsing ASN.1 data used in signatures, making itvulnerable to a signature forgery attack.

More info:

https://www.debian.org/security/2014/dsa-3034