SUSE alert SUSE-SU-2023:0468-1 (mozilla-nss)

From:
             
 
sle-security-updates@lists.suse.com
To:
             
 
sle-security-updates@lists.suse.com
Subject:
             
 
SUSE-SU-2023:0468-1: important: Security update for mozilla-nss
Date:
             
 
Tue, 21 Feb 2023 12:30:12 -0000
Message-ID:
             
 
<167698261254.5481.11888730802209989439@smelt2.suse.de>


# Security update for mozilla-nss

Announcement ID: SUSE-SU-2023:0468-1  
Rating: important  
References:

  * #1208138

  
Cross-References:

  * CVE-2023-0767

  
CVSS scores:

  * CVE-2023-0767 ( SUSE ):  8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  
Affected Products:

  * SUSE Linux Enterprise High Performance Computing 12 SP2
  * SUSE Linux Enterprise High Performance Computing 12 SP4
  * SUSE Linux Enterprise High Performance Computing 12 SP5
  * SUSE Linux Enterprise Server 12 SP2
  * SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2
  * SUSE Linux Enterprise Server 12 SP4
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
  * SUSE Linux Enterprise Server 12 SP5
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4
  * SUSE Linux Enterprise Server for SAP Applications 12 SP5
  * SUSE Linux Enterprise Software Development Kit 12 SP5
  * SUSE OpenStack Cloud 9
  * SUSE OpenStack Cloud Crowbar 9

  
  
An update that solves one vulnerability can now be installed.

## Description:

This update for mozilla-nss fixes the following issues:

Updated to NSS 3.79.4 (bsc#1208138):

  * CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

## Patch Instructions:

To install this SUSE Important update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE OpenStack Cloud 9  
    zypper in -t patch SUSE-OpenStack-Cloud-9-2023-468=1

  * SUSE OpenStack Cloud Crowbar 9  
    zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2023-468=1

  * SUSE Linux Enterprise Server for SAP Applications 12 SP4  
    zypper in -t patch SUSE-SLE-SAP-12-SP4-2023-468=1

  * SUSE Linux Enterprise Software Development Kit 12 SP5  
    zypper in -t patch SUSE-SLE-SDK-12-SP5-2023-468=1

  * SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2  
    zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2023-468=1

  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4  
    zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2023-468=1

  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4  
    zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2023-468=1

  * SUSE Linux Enterprise High Performance Computing 12 SP5  
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-468=1

  * SUSE Linux Enterprise Server 12 SP5  
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-468=1

  * SUSE Linux Enterprise Server for SAP Applications 12 SP5  
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-468=1

## Package List:

  * SUSE OpenStack Cloud 9 (x86_64)
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
  * SUSE OpenStack Cloud Crowbar 9 (x86_64)
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP4 (x86_64)
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x
    x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 (x86_64)
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (aarch64 x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (x86_64)
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (aarch64 ppc64le s390x
    x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (s390x x86_64)
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
  * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64)
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
  * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64)
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
    * mozilla-nss-debuginfo-3.79.4-58.94.1
    * mozilla-nss-3.79.4-58.94.1
    * mozilla-nss-certs-3.79.4-58.94.1
    * mozilla-nss-devel-3.79.4-58.94.1
    * libsoftokn3-hmac-3.79.4-58.94.1
    * libfreebl3-3.79.4-58.94.1
    * libfreebl3-debuginfo-3.79.4-58.94.1
    * libfreebl3-hmac-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-3.79.4-58.94.1
    * mozilla-nss-sysinit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-3.79.4-58.94.1
    * mozilla-nss-tools-debuginfo-3.79.4-58.94.1
    * mozilla-nss-debugsource-3.79.4-58.94.1
    * mozilla-nss-tools-3.79.4-58.94.1
    * libsoftokn3-3.79.4-58.94.1
    * libsoftokn3-debuginfo-3.79.4-58.94.1
  * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64)
    * libfreebl3-debuginfo-32bit-3.79.4-58.94.1
    * libfreebl3-hmac-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-32bit-3.79.4-58.94.1
    * libsoftokn3-hmac-32bit-3.79.4-58.94.1
    * libfreebl3-32bit-3.79.4-58.94.1
    * mozilla-nss-certs-32bit-3.79.4-58.94.1
    * mozilla-nss-sysinit-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-debuginfo-32bit-3.79.4-58.94.1
    * mozilla-nss-32bit-3.79.4-58.94.1
    * mozilla-nss-debuginfo-32bit-3.79.4-58.94.1
    * libsoftokn3-32bit-3.79.4-58.94.1

## References:

  * https://www.suse.com/security/cve/CVE-2023-0767.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1208138