OPENSUSE-SU-2020:0854-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 24 Jun 2020, 04:17
Last modified:04 Feb 2026, 04:03

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Jun 2020, 04:17
Published
Vulnerability first disclosed
04 Feb 2026, 04:03
Last Modified
Vulnerability information updated

Description

Security update for mozilla-nspr, mozilla-nss This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53 - CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978). - CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819). Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes mozilla-nspr to version 4.25 This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•mozilla-nspr&distro=openSUSE Leap 15.1

    < 4.25-lp151.2.9.1

  • opensuse•mozilla-nss&distro=openSUSE Leap 15.1

    < 3.53-lp151.2.23.1

References (6)