Honi soit qui mal y pense - CVE-2014-8001. So no we already have the case of an "accidental" vulnerability in the binary blob... who knows what's really behind that ;)
(And yes, Cisco/Mozilla claim in the meantime that this doesn't affect the version spread in binary form - but again... has anyone trustworthy verified this?) Cheers, Chris.
smime.p7s
Description: S/MIME cryptographic signature