<div class="container">
<h1>Security update for mozilla-nss</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2024:2600-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214980">bsc#1214980</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222804">bsc#1222804</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222807">bsc#1222807</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222811">bsc#1222811</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222813">bsc#1222813</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222814">bsc#1222814</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222821">bsc#1222821</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222822">bsc#1222822</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222826">bsc#1222826</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222828">bsc#1222828</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222830">bsc#1222830</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222833">bsc#1222833</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222834">bsc#1222834</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224113">bsc#1224113</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224115">bsc#1224115</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224116">bsc#1224116</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224118">bsc#1224118</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2023-5388.html">CVE-2023-5388</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-5388</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Enterprise Storage 7.1</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP2</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP3</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP3</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.1</li>
<li class="list-group-item">SUSE Linux Enterprise Micro 5.2</li>
<li class="list-group-item">SUSE Linux Enterprise Micro for Rancher 5.2</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP2</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP3</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP2</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP3</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves one vulnerability and has 16 security fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for mozilla-nss fixes the following issues:</p>
<ul>
<li>FIPS: Added more safe memset (bsc#1222811).</li>
<li>FIPS: Adjusted AES GCM restrictions (bsc#1222830).</li>
<li>FIPS: Adjusted approved ciphers (bsc#1222813, bsc#1222814, bsc#1222821,
bsc#1222822, bsc#1224118, bsc#1222807, bsc#1222828, bsc#1222834,
bsc#1222804, bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115,
bsc#1224116).</li>
</ul>
<p>Update to NSS 3.101.1:</p>
<ul>
<li>GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.</li>
</ul>
<p>update to NSS 3.101:</p>
<ul>
<li>add diagnostic assertions for SFTKObject refcount.</li>
<li>freeing the slot in DeleteCertAndKey if authentication failed</li>
<li>fix formatting issues.</li>
<li>Add Firmaprofesional CA Root-A Web to NSS.</li>
<li>remove invalid acvp fuzz test vectors.</li>
<li>pad short P-384 and P-521 signatures gtests.</li>
<li>remove unused FreeBL ECC code.</li>
<li>pad short P-384 and P-521 signatures.</li>
<li>be less strict about ECDSA private key length.</li>
<li>Integrate HACL* P-521.</li>
<li>Integrate HACL* P-384.</li>
<li>memory leak in create_objects_from_handles.</li>
<li>ensure all input is consumed in a few places in mozilla::pkix</li>
<li>SMIME/CMS and PKCS #12 do not integrate with modern NSS policy</li>
<li>clean up escape handling</li>
<li>Use lib::pkix as default validator instead of the old-one</li>
<li>Need to add high level support for PQ signing.</li>
<li>Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation</li>
<li>SMIME/CMS and PKCS #12 do not integrate with modern NSS policy</li>
<li>Allow for non-full length ecdsa signature when using softoken</li>
<li>Modification of .taskcluster.yml due to mozlint indent defects</li>
<li>Implement support for PBMAC1 in PKCS#12</li>
<li>disable VLA warnings for fuzz builds.</li>
<li>remove redundant AllocItem implementation.</li>
<li>add PK11_ReadDistrustAfterAttribute.</li>
<li>
<ul>
<li>Clang-formatting of SEC_GetMgfTypeByOidTag update</li>
</ul>
</li>
<li>Set SEC_ERROR_LIBRARY_FAILURE on self-test failure</li>
<li>sftk_getParameters(): Fix fallback to default variable after error with configfile.</li>
<li>
<p>Switch to the mozillareleases/image_builder image</p>
</li>
<li>
<p>switch from ec_field_GFp to ec_field_plain</p>
</li>
</ul>
<p>Update to NSS 3.100:</p>
<ul>
<li>merge pk11_kyberSlotList into pk11_ecSlotList for faster Xyber operations.</li>
<li>remove ckcapi.</li>
<li>avoid a potential PK11GenericObject memory leak.</li>
<li>Remove incomplete ESDH code.</li>
<li>Decrypt RSA OAEP encrypted messages.</li>
<li>Fix certutil CRLDP URI code.</li>
<li>Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.</li>
<li>Add ability to encrypt and decrypt CMS messages using ECDH.</li>
<li>Correct Templates for key agreement in smime/cmsasn.c.</li>
<li>Moving the decodedCert allocation to NSS.</li>
<li>Allow developers to speed up repeated local execution of NSS tests that depend on certificates.</li>
</ul>
<p>Update to NSS 3.99:</p>
<ul>
<li>Removing check for message len in ed25519 (bmo#1325335)</li>
<li>add ed25519 to SECU_ecName2params. (bmo#1884276)</li>
<li>add EdDSA wycheproof tests. (bmo#1325335)</li>
<li>nss/lib layer code for EDDSA. (bmo#1325335)</li>
<li>Adding EdDSA implementation. (bmo#1325335)</li>
<li>Exporting Certificate Compression types (bmo#1881027)</li>
<li>Updating ACVP docker to rust 1.74 (bmo#1880857)</li>
<li>Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)</li>
<li>Add NSS_CMSRecipient_IsSupported. (bmo#1877730)</li>
</ul>
<p>Update to NSS 3.98:</p>
<ul>
<li>(CVE-2023-5388) Timing attack against RSA decryption in TLS</li>
<li>Certificate Compression: enabling the check that the compression was advertised</li>
<li>Move Windows workers to nss-1/b-win2022-alpha</li>
<li>Remove Email trust bit from OISTE WISeKey Global Root GC CA</li>
<li>Replace <code>distutils.spawn.find_executable</code> with <code>shutil.which</code> within <code>mach</code> in <code>nss</code></li>
<li>Certificate Compression: Updating nss_bogo_shim to support Certificate compression</li>
<li>TLS Certificate Compression (RFC 8879) Implementation</li>
<li>Add valgrind annotations to freebl kyber operations for constant-time execution tests</li>
<li>Set nssckbi version number to 2.66</li>
<li>Add Telekom Security roots</li>
<li>Add D-Trust 2022 S/MIME roots</li>
<li>Remove expired Security Communication RootCA1 root</li>
<li>move keys to a slot that supports concatenation in PK11_ConcatSymKeys</li>
<li>remove unmaintained tls-interop tests</li>
<li>bogo: add support for the -ipv6 and -shim-id shim flags</li>
<li>bogo: add support for the -curves shim flag and update Kyber expectations</li>
<li>bogo: adjust expectation for a key usage bit test</li>
<li>mozpkix: add option to ignore invalid subject alternative names</li>
<li>Fix selfserv not stripping <code>publicname:</code> from -X value</li>
<li>take ownership of ecckilla shims</li>
<li>add valgrind annotations to freebl/ec.c</li>
<li>PR_INADDR_ANY needs PR_htonl before assignment to inet.ip</li>
<li>Update zlib to 1.3.1</li>
</ul>
<p>Update to NSS 3.97:</p>
<ul>
<li>make Xyber768d00 opt-in by policy</li>
<li>add libssl support for xyber768d00</li>
<li>add PK11_ConcatSymKeys</li>
<li>add Kyber and a PKCS#11 KEM interface to softoken</li>
<li>add a FreeBL API for Kyber</li>
<li>part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff</li>
<li>part 1: add a script for vendoring kyber from pq-crystals repo</li>
<li>Removing the calls to RSA Blind from loader.*</li>
<li>fix worker type for level3 mac tasks</li>
<li>RSA Blind implementation</li>
<li>Remove DSA selftests</li>
<li>read KWP testvectors from JSON</li>
<li>Backed out changeset dcb174139e4f</li>
<li>Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation</li>
<li>Wrap CC shell commands in gyp expansions</li>
</ul>
<p>Update to NSS 3.96.1:</p>
<ul>
<li>Use pypi dependencies for MacOS worker in ./build_gyp.sh</li>
<li>p7sign: add -a hash and -u certusage (also p7verify cleanups)</li>
<li>add a defensive check for large ssl_DefSend return values</li>
<li>Add dependency to the taskcluster script for Darwin</li>
<li>Upgrade version of the MacOS worker for the CI</li>
</ul>
<p>Update to NSS 3.95:</p>
<ul>
<li>Bump builtins version number.</li>
<li>Remove Email trust bit from Autoridad de Certificacion Firmaprofesional CIF A62634068 root cert.</li>
<li>Remove 4 DigiCert (Symantec/Verisign) Root Certificates</li>
<li>Remove 3 TrustCor Root Certificates from NSS.</li>
<li>Remove Camerfirma root certificates from NSS.</li>
<li>Remove old Autoridad de Certificacion Firmaprofesional Certificate.</li>
<li>Add four Commscope root certificates to NSS.</li>
<li>Add TrustAsia Global Root CA G3 and G4 root certificates.</li>
<li>Include P-384 and P-521 Scalar Validation from HACL*</li>
<li>Include P-256 Scalar Validation from HACL*.</li>
<li>After the HACL 256 ECC patch, NSS incorrectly encodes 256 ECC without DER wrapping at the softoken level</li>
<li>Add means to provide library parameters to C_Initialize</li>
<li>add OSXSAVE and XCR0 tests to AVX2 detection.</li>
<li>Typo in ssl3_AppendHandshakeNumber</li>
<li>Introducing input check of ssl3_AppendHandshakeNumber</li>
<li>Fix Invalid casts in instance.c</li>
</ul>
<p>Update to NSS 3.94:</p>
<ul>
<li>Updated code and commit ID for HACL*</li>
<li>update ACVP fuzzed test vector: refuzzed with current NSS</li>
<li>Softoken C_ calls should use system FIPS setting to select NSC_ or FC_ variants</li>
<li>NSS needs a database tool that can dump the low level representation of the database</li>
<li>declare string literals using char in pkixnames_tests.cpp</li>
<li>avoid implicit conversion for ByteString</li>
<li>update rust version for acvp docker</li>
<li>Moving the init function of the mpi_ints before clean-up in ec.c</li>
<li>P-256 ECDH and ECDSA from HACL*</li>
<li>Add ACVP test vectors to the repository</li>
<li>Stop relying on std::basic_string<uint8_t></li>
<li>Transpose the PPC_ABI check from Makefile to gyp</li>
</ul>
<p>Update to NSS 3.93:</p>
<ul>
<li>Update zlib in NSS to 1.3.</li>
<li>softoken: iterate hashUpdate calls for long inputs.</li>
<li>regenerate NameConstraints test certificates (bsc#1214980).</li>
</ul>
<p>Update to NSS 3.92:</p>
<ul>
<li>Set nssckbi version number to 2.62</li>
<li>Add 4 Atos TrustedRoot Root CA certificates to NSS</li>
<li>Add 4 SSL.com Root CA certificates</li>
<li>Add Sectigo E46 and R46 Root CA certificates</li>
<li>Add LAWtrust Root CA2 (4096)</li>
<li>Remove E-Tugra Certification Authority root</li>
<li>Remove Camerfirma Chambers of Commerce Root.</li>
<li>Remove Hongkong Post Root CA 1</li>
<li>Remove E-Tugra Global Root CA ECC v3 and RSA v3</li>
<li>Avoid redefining BYTE_ORDER on hppa Linux</li>
</ul>
<p>Update to NSS 3.91:</p>
<ul>
<li>Implementation of the HW support check for ADX instruction</li>
<li>Removing the support of Curve25519</li>
<li>Fix comment about the addition of ticketSupportsEarlyData</li>
<li>Adding args to enable-legacy-db build</li>
<li>dbtests.sh failure in "certutil dump keys with explicit default trust flags"</li>
<li>Initialize flags in slot structures</li>
<li>Improve the length check of RSA input to avoid heap overflow</li>
<li>Followup Fixes</li>
<li>avoid processing unexpected inputs by checking for m_exptmod base sign</li>
<li>add a limit check on order_k to avoid infinite loop</li>
<li>Update HACL* to commit 5f6051d2</li>
<li>add SHA3 to cryptohi and softoken</li>
<li>HACL SHA3</li>
<li>Disabling ASM C25519 for A but X86_64</li>
</ul>
<p>Update to NSS 3.90.3:</p>
<ul>
<li>GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.</li>
<li>clean up escape handling.</li>
<li>remove redundant AllocItem implementation.</li>
<li>Disable ASM support for Curve25519.</li>
<li>Disable ASM support for Curve25519 for all but X86_64.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP2
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP3
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Enterprise Storage 7.1
<br/>
<code>zypper in -t patch SUSE-Storage-7.1-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.1
<br/>
<code>zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro 5.2
<br/>
<code>zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2600=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Micro for Rancher 5.2
<br/>
<code>zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-2600=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64)
<ul>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64)
<ul>
<li>mozilla-nss-sysinit-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64)
<ul>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64)
<ul>
<li>mozilla-nss-sysinit-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64)
<ul>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64)
<ul>
<li>mozilla-nss-sysinit-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Enterprise Storage 7.1 (aarch64 x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-devel-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Enterprise Storage 7.1 (x86_64)
<ul>
<li>mozilla-nss-sysinit-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-32bit-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-sysinit-32bit-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-32bit-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64)
<ul>
<li>libfreebl3-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debugsource-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-certs-debuginfo-3.101.1-150000.3.117.1</li>
<li>libfreebl3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-tools-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-3.101.1-150000.3.117.1</li>
<li>libsoftokn3-debuginfo-3.101.1-150000.3.117.1</li>
<li>mozilla-nss-debuginfo-3.101.1-150000.3.117.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2023-5388.html">https://www.suse.com/security/cve/CVE-2023-5388.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214980">https://bugzilla.suse.com/show_bug.cgi?id=1214980</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222804">https://bugzilla.suse.com/show_bug.cgi?id=1222804</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222807">https://bugzilla.suse.com/show_bug.cgi?id=1222807</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222811">https://bugzilla.suse.com/show_bug.cgi?id=1222811</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222813">https://bugzilla.suse.com/show_bug.cgi?id=1222813</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222814">https://bugzilla.suse.com/show_bug.cgi?id=1222814</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222821">https://bugzilla.suse.com/show_bug.cgi?id=1222821</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222822">https://bugzilla.suse.com/show_bug.cgi?id=1222822</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222826">https://bugzilla.suse.com/show_bug.cgi?id=1222826</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222828">https://bugzilla.suse.com/show_bug.cgi?id=1222828</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222830">https://bugzilla.suse.com/show_bug.cgi?id=1222830</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222833">https://bugzilla.suse.com/show_bug.cgi?id=1222833</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222834">https://bugzilla.suse.com/show_bug.cgi?id=1222834</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224113">https://bugzilla.suse.com/show_bug.cgi?id=1224113</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224115">https://bugzilla.suse.com/show_bug.cgi?id=1224115</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224116">https://bugzilla.suse.com/show_bug.cgi?id=1224116</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1224118">https://bugzilla.suse.com/show_bug.cgi?id=1224118</a>
</li>
</ul>
</div>