| Description: | Network Security Services (NSS) is a set of libraries designed to supportthe cross-platform development of security-enabled client and serverapplications.It was found that a subordinate Certificate Authority (CA) mis-issued anintermediate certificate, which could be used to conduct man-in-the-middleattacks. This update renders that particular intermediate certificate asuntrusted. (BZ#1038894)Note: This fix only applies to applications using the NSS Builtin ObjectToken. It does not render the certificates untrusted for applications thatuse the NSS library, but do not use the NSS Builtin Object Token.All NSS users should upgrade to these updated packages, which correct thisissue. After installing the update, applications using NSS must berestarted for the changes to take effect. |