SUSE-SU-2024:0579-1: Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libsoftokn3-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nssto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-debugsourceto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-sysinitto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libfreebl3-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-sysinit-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-tools-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-develto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-certsto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-certs-debuginfoto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libsoftokn3to a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libfreebl3to a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-toolsto a version that resolves this vulnerability.Fixed in 3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-certsto a version that resolves this vulnerability.Fixed in 32bit-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nssto a version that resolves this vulnerability.Fixed in 32bit-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libsoftokn3to a version that resolves this vulnerability.Fixed in 32bit-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-certsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libfreebl3to a version that resolves this vulnerability.Fixed in 32bit-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libfreebl3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nssto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/libsoftokn3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-sysinitto a version that resolves this vulnerability.Fixed in 32bit-3.90.2-150000.3.108.1 - Upgrade
Upgrade
suse/mozilla-nss-sysinitto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-3.90.2-150000.3.108.1 - Upgrade
Upgrade
mozilla-nssto a version that resolves this vulnerability.Fixed in 3.90.2