SUSE-CU-2020:299-1: Security update of caasp/v5/389-ds

sle-security-updates at sle-security-updates at
Sat Jun 20 15:21:43 MDT 2020

SUSE Container Update Advisory: caasp/v5/389-ds
Container Advisory ID : SUSE-CU-2020:299-1
Container Tags        : caasp/v5/389-ds:1.4.3
Container Release     : 1.49
Severity              : important
Type                  : security
References            : 1159819 1169746 1171978 CVE-2019-17006 CVE-2020-12399 

The container caasp/v5/389-ds was updated. The following patches have been included in this update:

Advisory ID: SUSE-SU-2020:1677-1
Released:    Thu Jun 18 18:16:39 2020
Summary:     Security update for mozilla-nspr, mozilla-nss
Type:        security
Severity:    important
References:  1159819,1169746,1171978,CVE-2019-17006,CVE-2020-12399
This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53

- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978).
- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).
Release notes:

mozilla-nspr to version 4.25

More information about the sle-security-updates mailing list