On Wednesday, Chrome and Mozilla did coordinated updates to fix an RSA signature verification bug in NSS - the crypto library that handles SSL in Firefox and (currently) Chrome on most platforms. The updates should be well spread now and the bug has been detailed on Reddit, so I think it's safe to talk about.
(Hilariously, on the same day, bash turned out to have a little security issue and so hardly anyone noticed the NSS one!)
more here.............https://www.imperialviolet.org/2014/09/26/pkcs1.html
(Hilariously, on the same day, bash turned out to have a little security issue and so hardly anyone noticed the NSS one!)
more here.............https://www.imperialviolet.org/2014/09/26/pkcs1.html