Oval Definition:	oval:org.opensuse.security:def:50921
Revision Date: 2020-12-01 Version: 1 Title: Security update for mozilla-nspr, mozilla-nss (Important) Description: This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53 - CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978). - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes mozilla-nspr to version 4.25 Family: unix Class: patch Status: Reference(s): 1046303 1046540 1050244 1050319 1050536 1050540 1051510 1051858 1055120 1061840 1065600 1065729 1066674 1067126 1067906 1071995 1076830 1078248 1079524 1083647 1084760 1084831 1085030 1086283 1086288 1086301 1086313 1086314 1088047 1089644 1089811 1090888 1094555 1094825 1095805 1098633 1099125 1100132 1102881 1103203 1103308 1103543 1103989 1103990 1103991 1104353 1104427 1104731 1104745 1105025 1105536 1106105 1106110 1106237 1106240 1106383 1106751 1106838 1107685 1108043 1108241 1108377 1108468 1108828 1108841 1108870 1109137 1109151 1109158 1109217 1109330 1109739 1109784 1109806 1109818 1109837 1109907 1109911 1109915 1109919 1109951 1110006 1110096 1110538 1110561 1110921 1111028 1111076 1111506 1111666 1111806 1111819 1111830 1111834 1111841 1111870 1111901 1111904 1111928 1111983 1112170 1112173 1112178 1112208 1112219 1112221 1112246 1112372 1112374 1112514 1112554 1112708 1112710 1112711 1112712 1112713 1112731 1112732 1112733 1112734 1112735 1112736 1112738 1112739 1112740 1112741 1112743 1112745 1112746 1112894 1112899 1112902 1112903 1112905 1112906 1112907 1113257 1113284 1113722 1113956 1113994 1114279 1114685 1115026 1116451 1117169 1118661 1119113 1119532 1120423 1120853 1121874 1123131 1123328 1123455 1124062 1124167 1124869 1126206 1126390 1127155 1127354 1127371 1127611 1127682 1127760 1127857 1128432 1128845 1128902 1128910 1129551 1129770 1131644 1131645 1131868 1131870 1131871 1131872 1131874 1132154 1132390 1133401 1133640 1133738 1134303 1134395 1134973 1134983 1135189 1135228 1135296 1135556 1135642 1136157 1136598 1136922 1136935 1137103 1137194 1137223 1137236 1137429 1137625 1137728 1137884 1137995 1137996 1137998 1137999 1138000 1138002 1138003 1138005 1138006 1138007 1138008 1138009 1138010 1138011 1138012 1138013 1138014 1138015 1138016 1138017 1138018 1138019 1138039 1138291 1138293 1138374 1138375 1138589 1138719 1139751 1139771 1139782 1139865 1140133 1140328 1140405 1140424 1140428 1140575 1140577 1140637 1140658 1140715 1140719 1140726 1140727 1140728 1140814 1140948 1141054 1142095 1142635 1142924 1143959 1144333 1144443 1146519 1146544 1150934 1151067 1151548 1151900 1151910 1151927 1152107 1152631 1152692 1153535 1153628 1153811 1153917 1154043 1154058 1154243 1154355 1154601 1154768 1154916 1155327 1155331 1155334 1155689 1155897 1155921 1156258 1156259 1156286 1156402 1156462 1156471 1156920 1156928 1157032 1157038 1157042 1157044 1157045 1157046 1157049 1157070 1157115 1157143 1157145 1157155 1157157 1157158 1157160 1157162 1157169 1157171 1157173 1157178 1157180 1157182 1157183 1157184 1157191 1157193 1157197 1157298 1157303 1157304 1157307 1157324 1157333 1157386 1157424 1157463 1157499 1157678 1157692 1157698 1157778 1157853 1157895 1157908 1158013 1158021 1158026 1158049 1158063 1158064 1158065 1158066 1158067 1158068 1158071 1158082 1158094 1158132 1158381 1158394 1158398 1158407 1158410 1158413 1158417 1158427 1158445 1158533 1158637 1158638 1158639 1158640 1158641 1158643 1158644 1158645 1158646 1158647 1158649 1158651 1158652 1158819 1158823 1158824 1158827 1158834 1158893 1158900 1158903 1158904 1158954 1159024 1159028 1159297 1159377 1159394 1159483 1159484 1159500 1159569 1159588 1159819 1159841 1159908 1159909 1159910 1159911 1159955 1160147 1160195 1160210 1160211 1160433 1160442 1160467 1160468 1160469 1160470 1160476 1160560 1160618 1160678 1160755 1160756 1160784 1160787 1160802 1160803 1160804 1160917 1160966 1160968 1161087 1161243 1161472 1161514 1161518 1161522 1161523 1161549 1161552 1161674 1161931 1161933 1161934 1161935 1161936 1161937 1162028 1162067 1162109 1162139 1162501 1166881 1166933 1167331 1168345 1168874 1169746 1171978 1173991 1174284 1175686 1176262 1177409 1177412 1177413 1177414 1178593 930077 930078 930079 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-8041 CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 CVE-2017-16533 CVE-2017-18224 CVE-2017-18926 CVE-2018-14526 CVE-2018-16858 CVE-2018-16871 CVE-2018-18386 CVE-2018-18445 CVE-2018-20836 CVE-2019-10126 CVE-2019-10638 CVE-2019-10639 CVE-2019-11478 CVE-2019-11555 CVE-2019-11599 CVE-2019-12380 CVE-2019-12456 CVE-2019-12614 CVE-2019-12818 CVE-2019-12819 CVE-2019-13377 CVE-2019-14615 CVE-2019-14895 CVE-2019-14896 CVE-2019-14896 CVE-2019-14897 CVE-2019-14897 CVE-2019-14901 CVE-2019-15213 CVE-2019-16275 CVE-2019-16746 CVE-2019-16994 CVE-2019-17006 CVE-2019-18660 CVE-2019-18683 CVE-2019-18808 CVE-2019-18809 CVE-2019-19036 CVE-2019-19045 CVE-2019-19046 CVE-2019-19049 CVE-2019-19051 CVE-2019-19052 CVE-2019-19054 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19062 CVE-2019-19063 CVE-2019-19065 CVE-2019-19066 CVE-2019-19067 CVE-2019-19068 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19227 CVE-2019-19318 CVE-2019-19319 CVE-2019-19332 CVE-2019-19338 CVE-2019-19447 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19526 CVE-2019-19527 CVE-2019-19528 CVE-2019-19529 CVE-2019-19530 CVE-2019-19531 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19535 CVE-2019-19536 CVE-2019-19537 CVE-2019-19543 CVE-2019-19767 CVE-2019-19927 CVE-2019-19965 CVE-2019-19966 CVE-2019-20054 CVE-2019-20095 CVE-2019-20096 CVE-2019-20446 CVE-2019-20916 CVE-2019-2201 CVE-2019-9494 CVE-2019-9495 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2020-11501 CVE-2020-12399 CVE-2020-15663 CVE-2020-15664 CVE-2020-15670 CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27673 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 CVE-2020-6827 CVE-2020-6828 CVE-2020-7053 CVE-2020-8428 SUSE-SU-2018:3589-1 SUSE-SU-2019:1855-1 SUSE-SU-2019:1894-1 SUSE-SU-2020:0231-1 SUSE-SU-2020:0613-1 SUSE-SU-2020:0629-2 SUSE-SU-2020:0948-1 SUSE-SU-2020:0971-1 SUSE-SU-2020:1677-1 SUSE-SU-2020:2784-1 SUSE-SU-2020:3051-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Realtime packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information krb5-1.6.3-133.49.68 is installed OR krb5-32bit-1.6.3-133.49.68 is installed OR krb5-client-1.6.3-133.49.68 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information dbus-1-1.8.8-1 is installed OR dbus-1-x11-1.8.8-1 is installed OR libdbus-1-3-1.8.8-1 is installed OR libdbus-1-3-32bit-1.8.8-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libXfixes3-5.0.1-3 is installed OR libXfixes3-32bit-5.0.1-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information gpg2-2.0.24-3 is installed OR gpg2-lang-2.0.24-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information MozillaFirefox-52.2.0esr-108 is installed OR MozillaFirefox-translations-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed AND Package Information librsvg-2.42.8-3.3 is installed OR rsvg-view-2.42.8-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libfreebl3-3.53-3.40 is installed OR libfreebl3-32bit-3.53-3.40 is installed OR libsoftokn3-3.53-3.40 is installed OR libsoftokn3-32bit-3.53-3.40 is installed OR mozilla-nspr-4.25-3.12 is installed OR mozilla-nspr-32bit-4.25-3.12 is installed OR mozilla-nspr-devel-4.25-3.12 is installed OR mozilla-nss-3.53-3.40 is installed OR mozilla-nss-32bit-3.53-3.40 is installed OR mozilla-nss-certs-3.53-3.40 is installed OR mozilla-nss-certs-32bit-3.53-3.40 is installed OR mozilla-nss-devel-3.53-3.40 is installed OR mozilla-nss-sysinit-3.53-3.40 is installed OR mozilla-nss-tools-3.53-3.40 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-openjdk-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-demo-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-devel-1.8.0.242-3.30 is installed OR java-1_8_0-openjdk-headless-1.8.0.242-3.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_10-default-5-2 is installed OR kernel-livepatch-SLE15-SP1_Update_3-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information libraptor2-0-32bit-2.0.15-3.3 is installed OR raptor-2.0.15-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information libjpeg-turbo-1.5.3-5.12 is installed OR libjpeg62-32bit-62.2.0-5.12 is installed OR libjpeg62-devel-32bit-62.2.0-5.12 is installed OR libjpeg62-turbo-1.5.3-5.12 is installed OR libjpeg8-devel-32bit-8.1.2-5.12 is installed OR libturbojpeg0-32bit-8.1.2-5.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed AND Package Information cluster-md-kmp-rt-4.12.14-14.17 is installed OR dlm-kmp-rt-4.12.14-14.17 is installed OR gfs2-kmp-rt-4.12.14-14.17 is installed OR kernel-devel-rt-4.12.14-14.17 is installed OR kernel-rt-4.12.14-14.17 is installed OR kernel-rt-base-4.12.14-14.17 is installed OR kernel-rt-devel-4.12.14-14.17 is installed OR kernel-rt_debug-4.12.14-14.17 is installed OR kernel-rt_debug-devel-4.12.14-14.17 is installed OR kernel-source-rt-4.12.14-14.17 is installed OR kernel-syms-rt-4.12.14-14.17 is installed OR ocfs2-kmp-rt-4.12.14-14.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information xen-4.12.3_10-3.31 is installed OR xen-devel-4.12.3_10-3.31 is installed OR xen-tools-4.12.3_10-3.31 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libltdl7-2.4.2-14 is installed OR libltdl7-32bit-2.4.2-14 is installed OR libtool-2.4.2-14 is installed OR libtool-32bit-2.4.2-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_45-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_45-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_16-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libicu-doc-52.1-7 is installed OR libicu52_1-52.1-7 is installed OR libicu52_1-32bit-52.1-7 is installed OR libicu52_1-data-52.1-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information ntp-4.2.8p12-64.8 is installed OR ntp-doc-4.2.8p12-64.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND shadow-4.2.1-27.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information libmysqlclient18-10.0.35-29.20 is installed OR libmysqlclient18-32bit-10.0.35-29.20 is installed OR mariadb-10.0.35-29.20 is installed OR mariadb-client-10.0.35-29.20 is installed OR mariadb-errormessages-10.0.35-29.20 is installed OR mariadb-tools-10.0.35-29.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_155-94_50-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_17-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libssh2-1-1.4.3-20.9 is installed OR libssh2-1-32bit-1.4.3-20.9 is installed OR libssh2_org-1.4.3-20.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND sudo-1.8.20p2-3.7 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information gmp-6.1.2-4.3 is installed OR gmp-devel-6.1.2-4.3 is installed OR gmp-devel-32bit-6.1.2-4.3 is installed OR gnutls-3.6.7-6.14 is installed OR libgmp10-6.1.2-4.3 is installed OR libgmp10-32bit-6.1.2-4.3 is installed OR libgmpxx4-6.1.2-4.3 is installed OR libgmpxx4-32bit-6.1.2-4.3 is installed OR libgnutls-devel-3.6.7-6.14 is installed OR libgnutls30-3.6.7-6.14 is installed OR libgnutls30-32bit-3.6.7-6.14 is installed OR libgnutls30-hmac-3.6.7-6.14 is installed OR libgnutls30-hmac-32bit-3.6.7-6.14 is installed OR libgnutlsxx-devel-3.6.7-6.14 is installed OR libgnutlsxx28-3.6.7-6.14 is installed OR libhogweed4-3.4.1-4.12 is installed OR libhogweed4-32bit-3.4.1-4.12 is installed OR libnettle-3.4.1-4.12 is installed OR libnettle-devel-3.4.1-4.12 is installed OR libnettle6-3.4.1-4.12 is installed OR libnettle6-32bit-3.4.1-4.12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.25 is installed OR kernel-default-extra-4.12.14-25.25 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND ruby2.1-rubygem-extlib-0.9.16-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information xen-4.7.6_02-43.36 is installed OR xen-doc-html-4.7.6_02-43.36 is installed OR xen-libs-4.7.6_02-43.36 is installed OR xen-libs-32bit-4.7.6_02-43.36 is installed OR xen-tools-4.7.6_02-43.36 is installed OR xen-tools-domU-4.7.6_02-43.36 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information MozillaFirefox-68.1.0-109.89 is installed OR MozillaFirefox-branding-SLE-68-32.8 is installed OR MozillaFirefox-translations-common-68.1.0-109.89 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.55-38.44 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.55-38.44 is installed
BACK