Lucene search

K
suseSuseOPENSUSE-SU-2018:4117-1
HistoryDec 13, 2018 - 12:16 p.m.

Security update for mozilla-nss (moderate)

2018-12-1312:16:00
lists.opensuse.org
29

0.151 Low

EPSS

Percentile

95.3%

This update for mozilla-nss to version 3.36.6 fixes the following issues:

Security issues fixed:

  • CVE-2018-12384: NSS responded to an SSLv2-compatible ClientHello with a
    ServerHello that had an all-zero random (bmo#1483128, boo#1106873)
  • CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack
    (bmo#1485864, boo#1119069)