[Secure-testing-team] Re: [Secure-testing-commits] r4299 - data/CVE

[Florian Weimer]

* Alec Berryman:

> * CVE-2006-3127 (libnss in mozilla): after discussing with micah on irc,
>   determined that it is a bug with mozilla nss but that the affected version is
>   unreleased and not in Debian.

Note that a *lot* of DoS bugs were recently fixed in NSS:

http://bonsai.mozilla.org/cvsquery.cgi?branch=HEAD&file=mozilla/security/nss/lib/&date=month