US CERT: Mozilla Network Security Services (NSS) Library Vulnerability
Gerald309
-------- Forwarded Message --------
| Subject: | Mozilla Network Security Services (NSS) Library Vulnerability |
|---|---|
| Date: | Wed, 24 Sep 2014 16:18:57 -0500 |
| From: | US-CERT <US-...@ncas.us-cert.gov> |
| Reply-To: | US-...@ncas.us-cert.gov |
| To: | gera...@gmail.com |
|
National Cyber Awareness System: 09/24/2014 04:32 PM EDT
Original release date: September 24, 2014
A vulnerability in the Mozilla NSS library could allow an attacker to forge an RSA signature, such as an SSL certificate. The package is often included in 3rd party software, including Linux distributions, Google Chrome, and others. It is possible that other cryptographic libraries may be similarly affected. US-CERT recommends users and administrators review Vulnerability Note VU#772676, Mozilla Foundation Security Advisory 2014-73, and Google Stable Channel Update Blog for additional information and mitigation details. This product is provided subject to this Notification and this Privacy & Use policy.
|
||||||||||||
