NSS 3.15.1 brings TLS 1.2 support to Firefox

Network Security Services (NSS), the collection of cryptographic libraries which is used by, among others, Mozilla's Firefox browser, now supports TLS 1.2 with the release of its latest version. TLS 1.2 supports HMAC-SHA256 ciphers for the generation of pseudorandom numbers, and so allows the usage of TLS without MD5 and SHA-1 algorithms. NSS 3.15.1 also introduces a number of new types, most of which have to do with the new TLS version, along with a number of smaller changes and bug fixes.

Network Security Services

NSS 3.15.1 brings TLS 1.2 support to Firefox | The H Security

Anatomy of a buffer overflow - learning from Apple's latest security update

Apple has released its latest Security Update for OS X. Dubbed simply 2013-003, the update fixes a trifecta of memory corruption bugs in QuickTime caused by buffer overflows.Technically, one of the bugs is listed as a buffer underflow, which is just a buffer overflow the other way round. An overflow writes past the end of your own memory buffer, trampling on the next block of memory, which may well be in use for something else; an underflow writes in front of your memory, with a similarly risky outcome.

Apple`s latest security update

These bug fixes should all be considered critical, because they could be exploited for remote code execution.
In other words, a deliberately-tweaked movie file could trick your Mac into running program code hidden in the movie itself, even though such files are supposed to consist entirely of data.

Apple`s latest security update | Naked Security