Oval Definition:oval:org.opensuse.security:def:64978
Revision Date:2020-12-01Version:1
Title:Security update for mozilla-nspr, mozilla-nss (Important)
Description:

This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53

- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978). - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes

mozilla-nspr to version 4.25
Family:unixClass:patch
Status:Reference(s):1159819
1160790
1161088
1161089
1161670
1169746
1171978
1175193
1175194
1178150
CVE-2019-16785
CVE-2019-16786
CVE-2019-16789
CVE-2019-16792
CVE-2019-17006
CVE-2020-12399
CVE-2020-14349
CVE-2020-14350
CVE-2020-16125
openSUSE-SU-2020:1326-1
SUSE-SU-2020:1677-1
SUSE-SU-2020:3269-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise Module for Basesystem 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • postgresql10-10.14-lp152.2.6 is installed
  • OR postgresql10-contrib-10.14-lp152.2.6 is installed
  • OR postgresql10-devel-10.14-lp152.2.6 is installed
  • OR postgresql10-docs-10.14-lp152.2.6 is installed
  • OR postgresql10-plperl-10.14-lp152.2.6 is installed
  • OR postgresql10-plpython-10.14-lp152.2.6 is installed
  • OR postgresql10-pltcl-10.14-lp152.2.6 is installed
  • OR postgresql10-server-10.14-lp152.2.6 is installed
  • OR postgresql10-test-10.14-lp152.2.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • libfreebl3-3.53-3.40 is installed
  • OR libfreebl3-32bit-3.53-3.40 is installed
  • OR libsoftokn3-3.53-3.40 is installed
  • OR libsoftokn3-32bit-3.53-3.40 is installed
  • OR mozilla-nspr-4.25-3.12 is installed
  • OR mozilla-nspr-32bit-4.25-3.12 is installed
  • OR mozilla-nspr-devel-4.25-3.12 is installed
  • OR mozilla-nss-3.53-3.40 is installed
  • OR mozilla-nss-32bit-3.53-3.40 is installed
  • OR mozilla-nss-certs-3.53-3.40 is installed
  • OR mozilla-nss-certs-32bit-3.53-3.40 is installed
  • OR mozilla-nss-devel-3.53-3.40 is installed
  • OR mozilla-nss-sysinit-3.53-3.40 is installed
  • OR mozilla-nss-tools-3.53-3.40 is installed
  • BACK