openSUSE Recommended Update: Recommended update for mozilla-nspr, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1188-1 Rating: moderate References: #1061204 #1092031 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mozilla-nspr, mozilla-nss fixes the following issues: - boo#1092031: Update Mozilla NSS to 3.36.1, Mozilla NSPR to 4.19 as dependencies for an upcoming update to Mozilla Firefox 60 ESR. - boo#1061204: Separate hardware and software implementations for AES and GCM to avoid implicit execution of SSE2 methods if compiled for i586 Changes in Mozilla NSS: - TLS 1.3 support has been updated to draft -23 - various updates to cryptography functions - bug fixes and correctness fixes - TLS compression is no longer supported. API calls will succeed but TLS compression will remain disabled Changes in Mozilla NSPR: - add TCP Fast Open functionality Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-437=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libfreebl3-3.36.1-47.1 libfreebl3-debuginfo-3.36.1-47.1 libsoftokn3-3.36.1-47.1 libsoftokn3-debuginfo-3.36.1-47.1 mozilla-nspr-4.19-17.3.1 mozilla-nspr-debuginfo-4.19-17.3.1 mozilla-nspr-debugsource-4.19-17.3.1 mozilla-nspr-devel-4.19-17.3.1 mozilla-nss-3.36.1-47.1 mozilla-nss-certs-3.36.1-47.1 mozilla-nss-certs-debuginfo-3.36.1-47.1 mozilla-nss-debuginfo-3.36.1-47.1 mozilla-nss-debugsource-3.36.1-47.1 mozilla-nss-devel-3.36.1-47.1 mozilla-nss-sysinit-3.36.1-47.1 mozilla-nss-sysinit-debuginfo-3.36.1-47.1 mozilla-nss-tools-3.36.1-47.1 mozilla-nss-tools-debuginfo-3.36.1-47.1 - openSUSE Leap 42.3 (x86_64): libfreebl3-32bit-3.36.1-47.1 libfreebl3-debuginfo-32bit-3.36.1-47.1 libsoftokn3-32bit-3.36.1-47.1 libsoftokn3-debuginfo-32bit-3.36.1-47.1 mozilla-nspr-32bit-4.19-17.3.1 mozilla-nspr-debuginfo-32bit-4.19-17.3.1 mozilla-nss-32bit-3.36.1-47.1 mozilla-nss-certs-32bit-3.36.1-47.1 mozilla-nss-certs-debuginfo-32bit-3.36.1-47.1 mozilla-nss-debuginfo-32bit-3.36.1-47.1 mozilla-nss-sysinit-32bit-3.36.1-47.1 mozilla-nss-sysinit-debuginfo-32bit-3.36.1-47.1 References: https://bugzilla.suse.com/1061204 https://bugzilla.suse.com/1092031