Oval Definition:oval:org.opensuse.security:def:99843
Revision Date:2019-12-30Version:1
Title: (Moderate)
Description:

This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to NSS 3.47.1:

Security issues fixed:

- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). - CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527). - CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).

mozilla-nspr was updated to version 4.23:

- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.
Family:unixClass:patch
Status:Reference(s):1051510
1055117
1071995
1083647
1083710
1102247
1103991
1103992
1104745
1109837
1111666
1112374
1119222
1123080
1127034
1127315
1127611
1129770
1130972
1133021
1134090
1134097
1134390
1134399
1135335
1135642
1136217
1136342
1136460
1136461
1136462
1136467
1137458
1137534
1137535
1137584
1137609
1137811
1137827
1138874
1139358
1139619
1140133
1140139
1140322
1140559
1140652
1140676
1140903
1140945
1140948
1141312
1141322
1141401
1141402
1141452
1141453
1141454
1141478
1141558
1142023
1142052
1142083
1142112
1142115
1142119
1142220
1142221
1142254
1142350
1142351
1142354
1142359
1142450
1142623
1142673
1142701
1142868
1143003
1143045
1143105
1143185
1143189
1143191
1143209
1143507
1158527
1159819
CVE-2018-18508
CVE-2018-20855
CVE-2019-1125
CVE-2019-11745
CVE-2019-11810
CVE-2019-13631
CVE-2019-13648
CVE-2019-14283
CVE-2019-14284
CVE-2019-17006
SUSE-SU-2019:2073-1
Platform(s):Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND kernel-default-extra-4.12.14-197.15.1 is installed
  • Definition Synopsis
  • Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure is installed
  • AND Package Information
  • libfreebl3-3.47.1-3.22.1 is installed
  • OR libsoftokn3-3.47.1-3.22.1 is installed
  • OR mozilla-nspr-4.23-3.9.1 is installed
  • OR mozilla-nss-3.47.1-3.22.1 is installed
  • OR mozilla-nss-certs-3.47.1-3.22.1 is installed
  • BACK