Oval Definition:oval:org.opensuse.security:def:74943
Revision Date:2020-12-01Version:1
Title:Security update for mozilla-nspr, mozilla-nss (Important)
Description:

This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53

- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978). - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes

mozilla-nspr to version 4.25

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1159819
1169746
1171978
1175109
CVE-2019-17006
CVE-2020-12399
CVE-2020-8231
openSUSE-SU-2020:0854-1
openSUSE-SU-2020:1494-1
Platform(s):openSUSE Leap 15.1
openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libfreebl3-3.53-lp151.2.23 is installed
  • OR libfreebl3-32bit-3.53-lp151.2.23 is installed
  • OR libfreebl3-hmac-3.53-lp151.2.23 is installed
  • OR libfreebl3-hmac-32bit-3.53-lp151.2.23 is installed
  • OR libsoftokn3-3.53-lp151.2.23 is installed
  • OR libsoftokn3-32bit-3.53-lp151.2.23 is installed
  • OR libsoftokn3-hmac-3.53-lp151.2.23 is installed
  • OR libsoftokn3-hmac-32bit-3.53-lp151.2.23 is installed
  • OR mozilla-nspr-4.25-lp151.2.9 is installed
  • OR mozilla-nspr-32bit-4.25-lp151.2.9 is installed
  • OR mozilla-nspr-devel-4.25-lp151.2.9 is installed
  • OR mozilla-nss-3.53-lp151.2.23 is installed
  • OR mozilla-nss-32bit-3.53-lp151.2.23 is installed
  • OR mozilla-nss-certs-3.53-lp151.2.23 is installed
  • OR mozilla-nss-certs-32bit-3.53-lp151.2.23 is installed
  • OR mozilla-nss-devel-3.53-lp151.2.23 is installed
  • OR mozilla-nss-sysinit-3.53-lp151.2.23 is installed
  • OR mozilla-nss-sysinit-32bit-3.53-lp151.2.23 is installed
  • OR mozilla-nss-tools-3.53-lp151.2.23 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • curl-7.66.0-lp152.3.9 is installed
  • OR curl-mini-7.66.0-lp152.3.9 is installed
  • OR libcurl-devel-7.66.0-lp152.3.9 is installed
  • OR libcurl-devel-32bit-7.66.0-lp152.3.9 is installed
  • OR libcurl-mini-devel-7.66.0-lp152.3.9 is installed
  • OR libcurl4-7.66.0-lp152.3.9 is installed
  • OR libcurl4-32bit-7.66.0-lp152.3.9 is installed
  • OR libcurl4-mini-7.66.0-lp152.3.9 is installed
  • BACK