SUSE-RU-2024:0028-1: Recommended update for mozilla-nss
This update for mozilla-nss fixes the following issues: Mozilla NSS was updated to NSS 3.90.1: regenerate NameConstraints test certificates. add OSXSAVE and XCR0 tests to AVX2 detection.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/mozilla-nss-debugsourceto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libsoftokn3-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libfreebl3-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libfreebl3to a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-certsto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-develto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-toolsto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-tools-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-sysinitto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-sysinit-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nssto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-certs-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libsoftokn3to a version that resolves this vulnerability.Fixed in 3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nssto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libsoftokn3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libfreebl3to a version that resolves this vulnerability.Fixed in 32bit-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-certsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libsoftokn3to a version that resolves this vulnerability.Fixed in 32bit-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/libfreebl3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nssto a version that resolves this vulnerability.Fixed in 32bit-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-certsto a version that resolves this vulnerability.Fixed in 32bit-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-sysinitto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.1-150000.3.104.2 - Upgrade
Upgrade
suse/mozilla-nss-sysinitto a version that resolves this vulnerability.Fixed in 32bit-3.90.1-150000.3.104.2 - Upgrade
Upgrade
mozilla-nssto a version that resolves this vulnerability.Fixed in 3.90.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2024-28=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-28=1
Event History
Frequently Asked Questions
Which components should be reviewed when assessing exposure to this update?
The update covers mozilla-nss, mozilla-nss-certs, mozilla-nss-sysinit, libfreebl3, libsoftokn3, and their listed debuginfo or debugsource packages. Systems using these NSS components should be checked for the update.
What upstream NSS version does this update provide?
Mozilla NSS was updated to version 3.90.1. The advisory does not provide individual fixed distribution package version strings.
Does the advisory describe an exploit scenario, affected default configuration, or temporary mitigation?
No. The provided advisory information lists certificate-test regeneration and AVX2 detection changes, but does not state attacker prerequisites, default-configuration impact, or compensating controls if patching is delayed.