SUSE-CU-2020:654-1: Recommended update of suse/sles12sp5

[sle-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles12sp5
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2020:654-1
Container Tags        : suse/sles12sp5:6.5.86 , suse/sles12sp5:latest
Container Release     : 6.5.86
Severity              : moderate
Type                  : recommended
References            : 1155346 1176029 1177479 1177575 1177673 1177793 1177864 
-----------------------------------------------------------------

The container suse/sles12sp5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2020:3146-1
Released:    Wed Nov  4 08:38:54 2020
Summary:     Recommended update for openssl-1_0_0
Type:        recommended
Severity:    moderate
References:  1155346,1176029,1177479,1177575,1177673,1177793
This update for openssl-1_0_0 fixes the following issues:

Various changes required for FIPS 140-2 certification (jsc#SLE-10541)

- FIPS: Use SHA-2 in the RSA pairwise consistency check (bsc#1155346)
- FIPS: Add shared secret KAT to FIPS DH selftest (bsc#1176029)
- FIPS: Include ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029 bsc#1177479 bsc#1177575 bsc#1177673 bsc#1177793)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2020:3156-1
Released:    Wed Nov  4 15:21:49 2020
Summary:     Recommended update for ca-certificates-mozilla
Type:        recommended
Severity:    moderate
References:  1177864
This update for ca-certificates-mozilla fixes the following issues:

The SSL Root CA store was updated to the 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)

- Removed CAs:

  - EE Certification Centre Root CA
  - Taiwan GRCA

- Added CAs:

  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority