<div class="container">
<h1>Recommended update for mozilla-nss</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2023:2814-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1185116">#1185116</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1202118">#1202118</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Basesystem Module 15-SP4</li>
<li class="list-group-item">Basesystem Module 15-SP5</li>
<li class="list-group-item">openSUSE Leap 15.4</li>
<li class="list-group-item">openSUSE Leap 15.5</li>
<li class="list-group-item">openSUSE Leap Micro 5.3</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.3</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.4</li>
<li class="list-group-item">SUSE Linux Enterprise Micro for Rancher 5.3</li>
<li class="list-group-item">SUSE Linux Enterprise Micro for Rancher 5.4</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP5</li>
<li class="list-group-item">SUSE Manager Proxy 4.3</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.3</li>
<li class="list-group-item">SUSE Manager Server 4.3</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that has two recommended fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for mozilla-nss fixes the following issues:</p>
<p>mozilla-nss was updated to NSS 3.90:</p>
<ul>
<li>Add a constant time select function</li>
<li>Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.</li>
<li>output early build errors by default</li>
<li>Update the technical constraints for KamuSM</li>
<li>Add BJCA Global Root CA1 and CA2 root certificates</li>
<li>Enable default UBSan Checks</li>
<li>Add explicit handling of zero length records</li>
<li>Tidy up DTLS ACK Error Handling Path</li>
<li>Refactor zero length record tests</li>
<li>Fix compiler warning via correct assert</li>
<li>run linux tests on nss-t/t-linux-xlarge-gcp</li>
<li>In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator</li>
<li>Fix reading raw negative numbers</li>
<li>Repairing unreachable code in clang built with gyp</li>
<li>Integrate Vale Curve25519</li>
<li>Removing unused flags for Hacl*</li>
<li>Adding a better error message</li>
<li>Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6</li>
<li>Fall back to the softokn when writing certificate trust</li>
<li>FIPS-104-3 requires we restart post programmatically</li>
<li>cmd/ecperf: fix dangling pointer warning on gcc 13</li>
<li>Update ACVP dockerfile for compatibility with debian package changes</li>
<li>Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files</li>
<li>Removed deprecated sprintf function and replaced with snprintf</li>
<li>fix rst warnings in nss doc</li>
<li>Fix incorrect pygment style</li>
<li>Change GYP directive to apply across platforms</li>
<li>
<p>Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag</p>
</li>
<li>
<p>Merge the libfreebl3-hmac and libsoftokn3-hmac packages into the respective libraries. (bsc#1185116)</p>
</li>
</ul>
<p>update to NSS 3.89.1</p>
<ul>
<li>Update the technical constraints for KamuSM.</li>
<li>Add BJCA Global Root CA1 and CA2 root certificates.</li>
</ul>
<p>update to NSS 3.89</p>
<ul>
<li>revert freebl/softoken RSA_MIN_MODULUS_BITS increase</li>
<li>PR_STATIC_ASSERT is cursed</li>
<li>Need to add policy control to keys lengths for signatures</li>
<li>Fix unreachable code warning in fuzz builds</li>
<li>Fix various compiler warnings in NSS</li>
<li>Enable various compiler warnings for clang builds</li>
<li>set PORT error after sftk_HMACCmp failure</li>
<li>Need to add policy control to keys lengths for signatures</li>
<li>remove data length assertion in sec_PKCS7Decrypt</li>
<li>Make high tag number assertion failure an error</li>
<li>CKM_SHA384_KEY_DERIVATION correction maximum key length from 284 to 384</li>
<li>Tolerate certificate_authorities xtn in ClientHello</li>
<li>Fix build failure on Windows</li>
<li>migrate Win 2012 tasks to Azure</li>
<li>fix title length in doc</li>
<li>Add interop tests for HRR and PSK to GREASE suite</li>
<li>Add presence/absence tests for TLS GREASE</li>
<li>Correct addition of GREASE value to ALPN xtn</li>
<li>CH extension permutation</li>
<li>TLS GREASE (RFC8701)</li>
<li>improve handling of unknown PKCS#12 safe bag types</li>
<li>use a different treeherder symbol for each docker image build task</li>
<li>remove nested table in rst doc</li>
<li>Export NSS_CMSSignerInfo_GetDigestAlgTag</li>
<li>build failure while implicitly casting SECStatus to PRUInt32</li>
</ul>
<p>update to NSS 3.88.1</p>
<ul>
<li>improve handling of unknown PKCS#12 safe bag types</li>
</ul>
<p>update to NSS 3.88</p>
<ul>
<li>remove nested table in rst doc</li>
<li>Export NSS_CMSSignerInfo_GetDigestAlgTag.</li>
<li>build failure while implicitly casting SECStatus to PRUInt32</li>
<li>Add check for ClientHello SID max length</li>
<li>Added EarlyData ALPN test support to BoGo shim</li>
<li>ECH client - Discard resumption TLS < 1.3 Session(IDs|Tickets) if ECH configs are setup</li>
<li>On HRR skip PSK incompatible with negotiated ciphersuites hash algorithm</li>
<li>ECH client: Send ech_required alert on server negotiating TLS 1.2. Fixed misleading Gtest, enabled corresponding BoGo test</li>
<li>Added Bogo ECH rejection test support</li>
<li>Added ECH 0Rtt support to BoGo shim</li>
<li>RSA OAEP Wycheproof JSON</li>
<li>RSA decrypt Wycheproof JSON</li>
<li>ECDSA Wycheproof JSON</li>
<li>ECDH Wycheproof JSON</li>
<li>PKCS#1v1.5 wycheproof json</li>
<li>Use X25519 wycheproof json</li>
<li>Move scripts to python3</li>
<li>Properly link FuzzingEngine for oss-fuzz.</li>
<li>Extending RSA-PSS bltest test coverage (Adding SHA-256 and SHA-384)</li>
<li>NSS needs to move off of DSA for integrity checks</li>
<li>Add initial testing with ACVP vector sets using acvp-rust</li>
<li>Don't clone libFuzzer, rely on clang instead</li>
</ul>
<p>update to NSS 3.87</p>
<ul>
<li>NULL password encoding incorrect</li>
<li>Fix rng stub signature for fuzzing builds</li>
<li>Updating the compiler parsing for build</li>
<li>Modification of supported compilers</li>
<li>tstclnt crashes when accessing gnutls server without a user cert in the database.</li>
<li>Add configuration option to enable source-based coverage sanitizer</li>
<li>Update ECCKiila generated files.</li>
<li>Add support for the LoongArch 64-bit architecture</li>
<li>add checks for zero-length RSA modulus to avoid memory errors and failed assertions later</li>
<li>Additional zero-length RSA modulus checks</li>
</ul>
<p>update to NSS 3.86</p>
<ul>
<li>conscious language removal in NSS</li>
<li>Set nssckbi version number to 2.60</li>
<li>Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates</li>
<li>Remove Staat der Nederlanden EV Root CA from NSS</li>
<li>Remove EC-ACC root cert from NSS</li>
<li>Remove SwissSign Platinum CA - G2 from NSS</li>
<li>Remove Network Solutions Certificate Authority</li>
<li>compress docker image artifact with zstd</li>
<li>Migrate nss from AWS to GCP</li>
<li>Enable static builds in the CI</li>
<li>Removing SAW docker from the NSS build system</li>
<li>Initialising variables in the rsa blinding code</li>
<li>Implementation of the double-signing of the message for ECDSA</li>
<li>Adding exponent blinding for RSA.</li>
</ul>
<p>update to NSS 3.85</p>
<ul>
<li>Modification of the primes.c and dhe-params.c in order to have better looking tables</li>
<li>Update zlib in NSS to 1.2.13</li>
<li>Skip building modutil and shlibsign when building in Firefox</li>
<li>Use <strong>STDC_VERSION</strong> rather than <strong>STDC</strong> as a guard</li>
<li>Remove redundant variable definitions in lowhashtest</li>
<li>Add note about python executable to build instructions.</li>
</ul>
<p>update to NSS 3.84</p>
<ul>
<li>Bump minimum NSPR version to 4.35</li>
<li>Add a flag to disable building libnssckbi.</li>
</ul>
<p>update to NSS 3.83</p>
<ul>
<li>Remove set-but-unused variables from SEC_PKCS12DecoderValidateBags</li>
<li>Set nssckbi version number to 2.58</li>
<li>Add two SECOM root certificates to NSS</li>
<li>Add two DigitalSign root certificates to NSS</li>
<li>Remove Camerfirma Global Chambersign Root from NSS</li>
<li>Added bug reference and description to disabled UnsolicitedServerNameAck bogo ECH test</li>
<li>Removed skipping of ECH on equality of private and public server name</li>
<li>Added comment and bug reference to ECHRandomHRRExtension bogo test</li>
<li>Added Bogo shim client HRR test support. Fixed overwriting of CHInner.random on HRR</li>
<li>Added check for server only sending ECH extension
with retry configs in EncryptedExtensions and if not
accepting ECH. Changed config setting behavior to
skip configs with unsupported mandatory extensions
instead of failing</li>
<li>Added ECH client support to BoGo shim. Changed
CHInner creation to skip TLS 1.2 only extensions to
comply with BoGo</li>
<li>Added ECH server support to BoGo shim. Fixed NSS ECH server accept_confirmation bugs</li>
<li>Update BoGo tests to recent BoringSSL version</li>
<li>Bump minimum NSPR version to 4.34.1</li>
</ul>
<p>update to NSS 3.82</p>
<ul>
<li>check for null template in sec_asn1{d,e}_push_state</li>
<li>QuickDER: Forbid NULL tags with non-zero length</li>
<li>Initialize local variables in TlsConnectTestBase::ConnectAndCheckCipherSuite</li>
<li>Cast the result of GetProcAddress</li>
<li>pk11wrap: Tighten certificate lookup based on PKCS #11 URI.</li>
</ul>
<p>update to NSS 3.81</p>
<ul>
<li>Enable aarch64 hardware crypto support on OpenBSD</li>
<li>make NSS_SecureMemcmp 0/1 valued</li>
<li>Add no_application_protocol alert handler and test client error code is set</li>
<li>Gracefully handle null nickname in CERT_GetCertNicknameWithValidity</li>
<li>
<p>required for Firefox 104</p>
</li>
<li>
<p>raised NSPR requirement to 4.34.1</p>
</li>
<li>
<p>changing some Requires from (pre) to generic as (pre) is not sufficient (bsc#1202118)</p>
</li>
</ul>
<p>update to NSS 3.80</p>
<ul>
<li>Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.</li>
<li>Add support for asynchronous client auth hooks.</li>
<li>nss-policy-check: make unknown keyword check optional.</li>
<li>GatherBuffer: Reduced plaintext buffer allocations
by allocating it on initialization. Replaced
redundant code with assert. Debug builds: Added
buffer freeing/allocation for each record.</li>
<li>Mark 3.79 as an ESR release.</li>
<li>Bump nssckbi version number for June.</li>
<li>Remove Hellenic Academic 2011 Root.</li>
<li>Add E-Tugra Roots.</li>
<li>Add Certainly Roots.</li>
<li>Add DigitCert Roots.</li>
<li>Protect SFTKSlot needLogin with slotLock.</li>
<li>Compare signature and signatureAlgorithm fields in legacy certificate verifier.</li>
<li>Uninitialized value in cert_VerifyCertChainOld.</li>
<li>Unchecked return code in sec_DecodeSigAlg.</li>
<li>Uninitialized value in cert_ComputeCertType.</li>
<li>Avoid data race on primary password change.</li>
<li>Replace ppc64 dcbzl intrinisic.</li>
<li>Allow LDFLAGS override in makefile builds.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE Moderate update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap Micro 5.3
<br/>
<code>zypper in -t patch openSUSE-Leap-Micro-5.3-2023-2814=1</code>
</li>
<li class="list-group-item">
openSUSE Leap 15.4
<br/>
<code>zypper in -t patch openSUSE-SLE-15.4-2023-2814=1</code>
</li>
<li class="list-group-item">
openSUSE Leap 15.5
<br/>
<code>zypper in -t patch openSUSE-SLE-15.5-2023-2814=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro for Rancher 5.3
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.3-2023-2814=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.3
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.3-2023-2814=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro for Rancher 5.4
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.4-2023-2814=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.4
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-5.4-2023-2814=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2814=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2814=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap Micro 5.3 (aarch64 x86_64)
<ul>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>mozilla-nss-sysinit-3.90-150400.3.32.1</li>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-devel-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.4 (x86_64)
<ul>
<li>mozilla-nss-sysinit-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libsoftokn3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-3.90-150400.3.32.1</li>
<li>libsoftokn3-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-sysinit-32bit-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
<ul>
<li>mozilla-nss-sysinit-3.90-150400.3.32.1</li>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-devel-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.5 (x86_64)
<ul>
<li>mozilla-nss-sysinit-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libsoftokn3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-3.90-150400.3.32.1</li>
<li>libsoftokn3-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-sysinit-32bit-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)
<ul>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)
<ul>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64)
<ul>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64)
<ul>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)
<ul>
<li>mozilla-nss-sysinit-3.90-150400.3.32.1</li>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-devel-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP4 (x86_64)
<ul>
<li>libsoftokn3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-3.90-150400.3.32.1</li>
<li>libsoftokn3-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)
<ul>
<li>mozilla-nss-sysinit-3.90-150400.3.32.1</li>
<li>mozilla-nss-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-3.90-150400.3.32.1</li>
<li>libfreebl3-3.90-150400.3.32.1</li>
<li>libsoftokn3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-3.90-150400.3.32.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-tools-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-debugsource-3.90-150400.3.32.1</li>
<li>libsoftokn3-3.90-150400.3.32.1</li>
<li>libfreebl3-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-devel-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP5 (x86_64)
<ul>
<li>libsoftokn3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-3.90-150400.3.32.1</li>
<li>libsoftokn3-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-3.90-150400.3.32.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>mozilla-nss-32bit-debuginfo-3.90-150400.3.32.1</li>
<li>libfreebl3-32bit-debuginfo-3.90-150400.3.32.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1185116">https://bugzilla.suse.com/show_bug.cgi?id=1185116</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1202118">https://bugzilla.suse.com/show_bug.cgi?id=1202118</a>
</li>
</ul>
</div>