mozilla-nss

Security update for mozilla-nss,mozilla-nss-devel

A security problem in the SSL handling of the NSS libraries was found: If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This bug is tracked by the Mitre CVE ID CVE-2006-4340 and CVE-2006-4341. A security problem in the SSL handling of the NSS libraries was found: If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This bug is tracked by the Mitre CVE ID CVE-2006-4340 and CVE-2006-4341. security mozilla-nss x86_64 85e4e7fe2f219d956141d58d976306442e3c16dd mozilla-nss-32bit x86_64 a016ba5a8984e3b6cc7c03606d57f9418ef1131f mozilla-nss-devel x86_64 c157940689dd435711ea8774f5d118c1629ffd10