SUSE-SU-2023:0443-1

UNKNOWN

Security update for mozilla-nss

Published Feb 17, 2023

Modified 3 years ago

Fix available

Details

This update for mozilla-nss fixes the following issues:

Updated to NSS 3.79.4 (bsc#1208138):

CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

Affected Packages(16 packages)

libfreebl3

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libfreebl3-32bit

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libfreebl3-hmac

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libfreebl3-hmac-32bit

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libsoftokn3

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libsoftokn3-32bit

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libsoftokn3-hmac

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

libsoftokn3-hmac-32bit

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

mozilla-nss

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

mozilla-nss-32bit

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Fixed in:

3.79.4-150000.3.93.1

References

https://bugzilla.suse.com/1208138

https://www.suse.com/security/cve/CVE-2023-0767

https://www.suse.com/support/update/announcement/2023/suse-su-20230443-1/

Upstream

Related

Ecosystems(19)

SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

Timeline

PublishedFeb 17, 2023

ModifiedFeb 17, 2023

SUSE-SU-2023:0443-1 | Mondoo Vulnerability Intelligence