SUSE Recommended Update: Recommended update for mozilla-nss ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:2939-1 Rating: moderate References: #1201298 #1202645 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mozilla-nss fixes the following issues: Update to NSS 3.79.1 (bsc#1202645) * compare signature and signatureAlgorithm fields in legacy certificate verifier. * Uninitialized value in cert_ComputeCertType. * protect SFTKSlot needLogin with slotLock. * avoid data race on primary password change. * check for null template in sec_asn1{d,e}_push_state. - FIPS: unapprove the rest of the DSA ciphers, keeping signature verification only (bsc#1201298). Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2939=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-2939=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libfreebl3-3.79.1-150400.3.10.2 libfreebl3-debuginfo-3.79.1-150400.3.10.2 libfreebl3-hmac-3.79.1-150400.3.10.2 libsoftokn3-3.79.1-150400.3.10.2 libsoftokn3-debuginfo-3.79.1-150400.3.10.2 libsoftokn3-hmac-3.79.1-150400.3.10.2 mozilla-nss-3.79.1-150400.3.10.2 mozilla-nss-certs-3.79.1-150400.3.10.2 mozilla-nss-certs-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-debugsource-3.79.1-150400.3.10.2 mozilla-nss-devel-3.79.1-150400.3.10.2 mozilla-nss-sysinit-3.79.1-150400.3.10.2 mozilla-nss-sysinit-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-tools-3.79.1-150400.3.10.2 mozilla-nss-tools-debuginfo-3.79.1-150400.3.10.2 - openSUSE Leap 15.4 (x86_64): libfreebl3-32bit-3.79.1-150400.3.10.2 libfreebl3-32bit-debuginfo-3.79.1-150400.3.10.2 libfreebl3-hmac-32bit-3.79.1-150400.3.10.2 libsoftokn3-32bit-3.79.1-150400.3.10.2 libsoftokn3-32bit-debuginfo-3.79.1-150400.3.10.2 libsoftokn3-hmac-32bit-3.79.1-150400.3.10.2 mozilla-nss-32bit-3.79.1-150400.3.10.2 mozilla-nss-32bit-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-certs-32bit-3.79.1-150400.3.10.2 mozilla-nss-certs-32bit-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-sysinit-32bit-3.79.1-150400.3.10.2 mozilla-nss-sysinit-32bit-debuginfo-3.79.1-150400.3.10.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libfreebl3-3.79.1-150400.3.10.2 libfreebl3-debuginfo-3.79.1-150400.3.10.2 libfreebl3-hmac-3.79.1-150400.3.10.2 libsoftokn3-3.79.1-150400.3.10.2 libsoftokn3-debuginfo-3.79.1-150400.3.10.2 libsoftokn3-hmac-3.79.1-150400.3.10.2 mozilla-nss-3.79.1-150400.3.10.2 mozilla-nss-certs-3.79.1-150400.3.10.2 mozilla-nss-certs-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-debugsource-3.79.1-150400.3.10.2 mozilla-nss-devel-3.79.1-150400.3.10.2 mozilla-nss-sysinit-3.79.1-150400.3.10.2 mozilla-nss-sysinit-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-tools-3.79.1-150400.3.10.2 mozilla-nss-tools-debuginfo-3.79.1-150400.3.10.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libfreebl3-32bit-3.79.1-150400.3.10.2 libfreebl3-32bit-debuginfo-3.79.1-150400.3.10.2 libfreebl3-hmac-32bit-3.79.1-150400.3.10.2 libsoftokn3-32bit-3.79.1-150400.3.10.2 libsoftokn3-32bit-debuginfo-3.79.1-150400.3.10.2 libsoftokn3-hmac-32bit-3.79.1-150400.3.10.2 mozilla-nss-32bit-3.79.1-150400.3.10.2 mozilla-nss-32bit-debuginfo-3.79.1-150400.3.10.2 mozilla-nss-certs-32bit-3.79.1-150400.3.10.2 mozilla-nss-certs-32bit-debuginfo-3.79.1-150400.3.10.2 References: https://bugzilla.suse.com/1201298 https://bugzilla.suse.com/1202645