Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0149-1

Опубликовано: 18 янв. 2016
Источник: suse-cvrf

Описание

Security update for mozilla-nss

This update contains mozilla-nss 3.19.2.2 and fixes the following security issue:

  • CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature (bsc#959888).

Список пакетов

SUSE Linux Enterprise Desktop 12
libfreebl3-3.19.2.2-32.1
libfreebl3-32bit-3.19.2.2-32.1
libsoftokn3-3.19.2.2-32.1
libsoftokn3-32bit-3.19.2.2-32.1
mozilla-nss-3.19.2.2-32.1
mozilla-nss-32bit-3.19.2.2-32.1
mozilla-nss-certs-3.19.2.2-32.1
mozilla-nss-certs-32bit-3.19.2.2-32.1
mozilla-nss-sysinit-3.19.2.2-32.1
mozilla-nss-sysinit-32bit-3.19.2.2-32.1
mozilla-nss-tools-3.19.2.2-32.1
SUSE Linux Enterprise Desktop 12 SP1
libfreebl3-3.19.2.2-32.1
libfreebl3-32bit-3.19.2.2-32.1
libsoftokn3-3.19.2.2-32.1
libsoftokn3-32bit-3.19.2.2-32.1
mozilla-nss-3.19.2.2-32.1
mozilla-nss-32bit-3.19.2.2-32.1
mozilla-nss-certs-3.19.2.2-32.1
mozilla-nss-certs-32bit-3.19.2.2-32.1
mozilla-nss-sysinit-3.19.2.2-32.1
mozilla-nss-sysinit-32bit-3.19.2.2-32.1
mozilla-nss-tools-3.19.2.2-32.1
SUSE Linux Enterprise Server 12
libfreebl3-3.19.2.2-32.1
libfreebl3-32bit-3.19.2.2-32.1
libfreebl3-hmac-3.19.2.2-32.1
libfreebl3-hmac-32bit-3.19.2.2-32.1
libsoftokn3-3.19.2.2-32.1
libsoftokn3-32bit-3.19.2.2-32.1
libsoftokn3-hmac-3.19.2.2-32.1
libsoftokn3-hmac-32bit-3.19.2.2-32.1
mozilla-nss-3.19.2.2-32.1
mozilla-nss-32bit-3.19.2.2-32.1
mozilla-nss-certs-3.19.2.2-32.1
mozilla-nss-certs-32bit-3.19.2.2-32.1
mozilla-nss-sysinit-3.19.2.2-32.1
mozilla-nss-sysinit-32bit-3.19.2.2-32.1
mozilla-nss-tools-3.19.2.2-32.1
SUSE Linux Enterprise Server 12 SP1
libfreebl3-3.19.2.2-32.1
libfreebl3-32bit-3.19.2.2-32.1
libfreebl3-hmac-3.19.2.2-32.1
libfreebl3-hmac-32bit-3.19.2.2-32.1
libsoftokn3-3.19.2.2-32.1
libsoftokn3-32bit-3.19.2.2-32.1
libsoftokn3-hmac-3.19.2.2-32.1
libsoftokn3-hmac-32bit-3.19.2.2-32.1
mozilla-nss-3.19.2.2-32.1
mozilla-nss-32bit-3.19.2.2-32.1
mozilla-nss-certs-3.19.2.2-32.1
mozilla-nss-certs-32bit-3.19.2.2-32.1
mozilla-nss-sysinit-3.19.2.2-32.1
mozilla-nss-sysinit-32bit-3.19.2.2-32.1
mozilla-nss-tools-3.19.2.2-32.1
SUSE Linux Enterprise Server for SAP Applications 12
libfreebl3-3.19.2.2-32.1
libfreebl3-32bit-3.19.2.2-32.1
libfreebl3-hmac-3.19.2.2-32.1
libfreebl3-hmac-32bit-3.19.2.2-32.1
libsoftokn3-3.19.2.2-32.1
libsoftokn3-32bit-3.19.2.2-32.1
libsoftokn3-hmac-3.19.2.2-32.1
libsoftokn3-hmac-32bit-3.19.2.2-32.1
mozilla-nss-3.19.2.2-32.1
mozilla-nss-32bit-3.19.2.2-32.1
mozilla-nss-certs-3.19.2.2-32.1
mozilla-nss-certs-32bit-3.19.2.2-32.1
mozilla-nss-sysinit-3.19.2.2-32.1
mozilla-nss-sysinit-32bit-3.19.2.2-32.1
mozilla-nss-tools-3.19.2.2-32.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libfreebl3-3.19.2.2-32.1
libfreebl3-32bit-3.19.2.2-32.1
libfreebl3-hmac-3.19.2.2-32.1
libfreebl3-hmac-32bit-3.19.2.2-32.1
libsoftokn3-3.19.2.2-32.1
libsoftokn3-32bit-3.19.2.2-32.1
libsoftokn3-hmac-3.19.2.2-32.1
libsoftokn3-hmac-32bit-3.19.2.2-32.1
mozilla-nss-3.19.2.2-32.1
mozilla-nss-32bit-3.19.2.2-32.1
mozilla-nss-certs-3.19.2.2-32.1
mozilla-nss-certs-32bit-3.19.2.2-32.1
mozilla-nss-sysinit-3.19.2.2-32.1
mozilla-nss-sysinit-32bit-3.19.2.2-32.1
mozilla-nss-tools-3.19.2.2-32.1
SUSE Linux Enterprise Software Development Kit 12
mozilla-nss-devel-3.19.2.2-32.1
SUSE Linux Enterprise Software Development Kit 12 SP1
mozilla-nss-devel-3.19.2.2-32.1

Ссылки

Описание

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libfreebl3-3.19.2.2-32.1
SUSE Linux Enterprise Desktop 12 SP1:libfreebl3-32bit-3.19.2.2-32.1
SUSE Linux Enterprise Desktop 12 SP1:libsoftokn3-3.19.2.2-32.1
SUSE Linux Enterprise Desktop 12 SP1:libsoftokn3-32bit-3.19.2.2-32.1
Ссылки
Уязвимость SUSE-SU-2016:0149-1