[kwlug-disc] NSS Vulnerability

[Hubert Chathi]

On Thu, 25 Sep 2014 17:50:14 -0400, Khalid Baheyeldin <kb at 2bits.com> said:

> On Thu, Sep 25, 2014 at 5:24 PM, Hubert Chathi <hubert at uhoreg.ca> wrote:
>> Am I the only one who is more concerned about the NSS vulnerability?
>> 
>> https://www.mozilla.org/security/announce/2014/mfsa2014-73.html
>> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1568
>> 

> Ubuntu pushed fixes for NSS (twice in a week or so) and Firefox for
> those.

Yup, I got the Debian updates.  But I'm more concerned about it because
it affects desktop machines, which are in general much less responsibly
maintained than server machines.  Thankfully, Firefox and Chrome
auto-update, but people need to restart their browsers to use the new
versions.  IMHO, the press should be telling everyone to restart their
browsers, instead of freaking out about bash.