shield Security update for mozilla-nspr, mozilla-nss

SUSE-SLE-SDK-12-SP4-2020-88

This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to NSS 3.47.1: Security issues fixed: - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). - CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527). - CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322). mozilla-nspr was updated to version 4.23: - Whitespace in C files was cleaned up and no longer uses tab characters for indenting.

• Release Date
  Jan 13 2020
• References
  Bugzilla: 1159819, 1141322, 1158527
  CVEs: CVE-2019-17006, CVE-2019-11745
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  mozilla-nspr
  Netscape Portable Runtime

  4.23-19.12.1

  lock src

  mozilla-nspr-devel
  Netscape Portable Runtime development files

  4.23-19.12.1

  lock rpm

  mozilla-nss
  Network Security Services

  3.47.1-58.34.1

  lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.47.1-58.34.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  mozilla-nspr
  Netscape Portable Runtime

  4.23-19.12.1

  lock src

  mozilla-nspr-devel
  Netscape Portable Runtime development files

  4.23-19.12.1

  lock rpm

  mozilla-nss
  Network Security Services

  3.47.1-58.34.1

  lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.47.1-58.34.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  mozilla-nspr
  Netscape Portable Runtime

  4.23-19.12.1

  lock src

  mozilla-nspr-devel
  Netscape Portable Runtime development files

  4.23-19.12.1

  lock rpm

  mozilla-nss
  Network Security Services

  3.47.1-58.34.1

  lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.47.1-58.34.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  mozilla-nspr
  Netscape Portable Runtime

  4.23-19.12.1

  lock src

  mozilla-nspr-devel
  Netscape Portable Runtime development files

  4.23-19.12.1

  lock rpm

  mozilla-nss
  Network Security Services

  3.47.1-58.34.1

  lock src

  mozilla-nss-devel
  Network (Netscape) Security Services development files

  3.47.1-58.34.1

  lock rpm