shield Security update for mozilla-nspr, mozilla-nss

SUSE-SLE-SAP-12-SP1-2020-88

This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to NSS 3.47.1: Security issues fixed: - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). - CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527). - CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322). mozilla-nspr was updated to version 4.23: - Whitespace in C files was cleaned up and no longer uses tab characters for indenting.

• Release Date
  Jan 13 2020
• References
  Bugzilla: 1159819, 1141322, 1158527
  CVEs: CVE-2019-17006, CVE-2019-11745
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  libfreebl3
  Freebl library for the Network Security Services

  3.47.1-58.34.1

  lock rpm

  libfreebl3-32bit
  Freebl library for the Network Security Services

  3.47.1-58.34.1

  lock rpm

  libfreebl3-hmac
  Freebl library checksums for the Network Security Services

  3.47.1-58.34.1

  lock rpm

  libfreebl3-hmac-32bit
  Freebl library checksums for the Network Security Services

  3.47.1-58.34.1

  lock rpm

  libsoftokn3
  Network Security Services Softoken Module

  3.47.1-58.34.1

  lock rpm

  libsoftokn3-32bit
  Network Security Services Softoken Module

  3.47.1-58.34.1

  lock rpm

  libsoftokn3-hmac
  Network Security Services Softoken Module checksums

  3.47.1-58.34.1

  lock rpm

  libsoftokn3-hmac-32bit
  Network Security Services Softoken Module checksums

  3.47.1-58.34.1

  lock rpm

  mozilla-nspr
  Netscape Portable Runtime

  4.23-19.12.1

  lock rpm

  lock src

  mozilla-nspr-32bit
  Netscape Portable Runtime

  4.23-19.12.1

  lock rpm

  mozilla-nspr-devel
  Netscape Portable Runtime development files

  4.23-19.12.1

  lock rpm

  mozilla-nss
  Network Security Services

  3.47.1-58.34.1

  lock rpm

  lock src

  mozilla-nss-32bit
  Network Security Services

  3.47.1-58.34.1

  lock rpm

  mozilla-nss-certs
  CA certificates for NSS

  3.47.1-58.34.1

  lock rpm

  mozilla-nss-certs-32bit
  CA certificates for NSS

  3.47.1-58.34.1

  lock rpm

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.47.1-58.34.1

  lock rpm

  mozilla-nss-sysinit
  System NSS Initialization

  3.47.1-58.34.1

  lock rpm

  mozilla-nss-sysinit-32bit
  System NSS Initialization

  3.47.1-58.34.1

  lock rpm

  mozilla-nss-tools
  Tools for developing, debugging, and managing applications that use NSS

  3.47.1-58.34.1

  lock rpm