SUSE-CU-2020:299-1: Security update of caasp/v5/389-ds

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: caasp/v5/389-ds
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2020:299-1
Container Tags        : caasp/v5/389-ds:1.4.3
Container Release     : 1.49
Severity              : important
Type                  : security
References            : 1159819 1169746 1171978 CVE-2019-17006 CVE-2020-12399 
-----------------------------------------------------------------

The container caasp/v5/389-ds was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:1677-1
Released:    Thu Jun 18 18:16:39 2020
Summary:     Security update for mozilla-nspr, mozilla-nss
Type:        security
Severity:    important
References:  1159819,1169746,1171978,CVE-2019-17006,CVE-2020-12399
This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53

- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978).
- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).
Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes

mozilla-nspr to version 4.25