Debian/nss: medium 5.9
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TL
Action: Upgrade nss to 2:3.21-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:3.21-1 | - |
Fixed versions
| 2:3.21-1 |
Sources
published · modified · JSON