I've filed the patch upstream (to https://bugzilla.mozilla.org/show_bug.cgi?id=1062903), but as NSS upstream releases are quite rare, please apply it in Debian. -- A tit a day keeps the vet away.