gpp_maybe Security update for mozilla-nspr, mozilla-nss

SUSE-SLE-Module-Server-Applications-15-SP1-2020-1677

This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53 - CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978). - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes mozilla-nspr to version 4.25

• Release Date
  Jun 18 2020
• References
  Bugzilla: 1171978, 1159819, 1169746
  CVEs: CVE-2019-17006, CVE-2020-12399
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.1 aarch64

• Packages
  libfreebl3-hmac
  Freebl library checksums for the Network Security Services

  3.53-3.40.1 lock rpm

  libsoftokn3-hmac
  Network Security Services Softoken Module checksums

  3.53-3.40.1 lock rpm

  mozilla-nss
  Network Security Services

  3.53-3.40.1 lock src

Server Applications Module 15.1 ppc64le

• Packages
  libfreebl3-hmac
  Freebl library checksums for the Network Security Services

  3.53-3.40.1 lock rpm

  libsoftokn3-hmac
  Network Security Services Softoken Module checksums

  3.53-3.40.1 lock rpm

  mozilla-nss
  Network Security Services

  3.53-3.40.1 lock src

Server Applications Module 15.1 s390x

• Packages
  libfreebl3-hmac
  Freebl library checksums for the Network Security Services

  3.53-3.40.1 lock rpm

  libsoftokn3-hmac
  Network Security Services Softoken Module checksums

  3.53-3.40.1 lock rpm

  mozilla-nss
  Network Security Services

  3.53-3.40.1 lock src

Server Applications Module 15.1 x86_64

• Packages
  libfreebl3-hmac
  Freebl library checksums for the Network Security Services

  3.53-3.40.1 lock rpm

  libsoftokn3-hmac
  Network Security Services Softoken Module checksums

  3.53-3.40.1 lock rpm

  mozilla-nss
  Network Security Services

  3.53-3.40.1 lock src