SUSE-SU-2023:0468-1

Опубликовано: 21 фев. 2023

Источник: suse-cvrf

Описание

Security update for mozilla-nss

This update for mozilla-nss fixes the following issues:

Updated to NSS 3.79.4 (bsc#1208138):

CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

Список пакетов

Image SLES12-SP5-Azure-BYOS

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-Basic-On-Demand

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-HPC-BYOS

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-HPC-On-Demand

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-SAP-BYOS

libfreebl3-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-SAP-On-Demand

libfreebl3-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-Standard-On-Demand

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-EC2-BYOS

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-EC2-ECS-On-Demand

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-EC2-On-Demand

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-EC2-SAP-BYOS

libfreebl3-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-EC2-SAP-On-Demand

libfreebl3-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-GCE-BYOS

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE Linux Enterprise Server 12 SP4-ESPOS

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE Linux Enterprise Server 12 SP4-LTSS

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE Linux Enterprise Server 12 SP5

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE Linux Enterprise Software Development Kit 12 SP5

mozilla-nss-devel-3.79.4-58.94.1

SUSE OpenStack Cloud 9

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

SUSE OpenStack Cloud Crowbar 9

libfreebl3-3.79.4-58.94.1

libfreebl3-32bit-3.79.4-58.94.1

libfreebl3-hmac-3.79.4-58.94.1

libfreebl3-hmac-32bit-3.79.4-58.94.1

libsoftokn3-3.79.4-58.94.1

libsoftokn3-32bit-3.79.4-58.94.1

libsoftokn3-hmac-3.79.4-58.94.1

libsoftokn3-hmac-32bit-3.79.4-58.94.1

mozilla-nss-3.79.4-58.94.1

mozilla-nss-32bit-3.79.4-58.94.1

mozilla-nss-certs-3.79.4-58.94.1

mozilla-nss-certs-32bit-3.79.4-58.94.1

mozilla-nss-devel-3.79.4-58.94.1

mozilla-nss-sysinit-3.79.4-58.94.1

mozilla-nss-sysinit-32bit-3.79.4-58.94.1

mozilla-nss-tools-3.79.4-58.94.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230468-1/
Link for SUSE-SU-2023:0468-1
https://lists.suse.com/pipermail/sle-security-updates/2023-February/013851.html
E-Mail link for SUSE-SU-2023:0468-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1208138
SUSE Bug 1208138
https://www.suse.com/security/cve/CVE-2023-0767/
SUSE CVE CVE-2023-0767 page

Описание

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-Basic-On-Demand:mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-HPC-BYOS:mozilla-nss-certs-3.79.4-58.94.1

Image SLES12-SP5-Azure-HPC-On-Demand:mozilla-nss-certs-3.79.4-58.94.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-0767.html
CVE-2023-0767
https://bugzilla.suse.com/1208138
SUSE Bug 1208138
https://bugzilla.suse.com/1213200
SUSE Bug 1213200
https://bugzilla.suse.com/1213818
SUSE Bug 1213818
https://bugzilla.suse.com/1214271
SUSE Bug 1214271
https://bugzilla.suse.com/1218481
SUSE Bug 1218481
https://bugzilla.suse.com/1218964
SUSE Bug 1218964
https://bugzilla.suse.com/1225630
SUSE Bug 1225630

SUSE-SU-2023:0468-1

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP4-ESPOS

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2023-0767

Описание

Затронутые продукты

Ссылки