Mozilla Network Security Service: Multiple vulnerabilities

Mozilla Network Security Service: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Network Security Service, the worst of which could lead to Denial of Service. nss 2014-06-21 2014-06-21 455558 486114 491234 remote 3.15.3 3.15.3

The Mozilla Network Security Service is a library implementing security features like SSL v2/v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME and X.509 certificates.

Multiple vulnerabilities have been discovered in the Mozilla Network Security Service. Please review the CVE identifiers referenced below for more details about the vulnerabilities.

A remote attacker can cause a Denial of Service condition.

There is no known workaround at this time.

All Mozilla Network Security Service users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-libs/nss-3.15.3"

Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.

CVE-2013-1620 CVE-2013-1739 CVE-2013-1741 CVE-2013-2566 CVE-2013-5605 CVE-2013-5606 CVE-2013-5607 BlueKnight K_F