Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

openSUSE 11.4 and 11.3: 2011:0935-1 Important: Mozilla NSS Patch

opensuse
Calendar Grey August 23, 2011
Dist Opensuse Esm H88
OpenSUSE has released a security patch to tackle vulnerabilities within Mozilla NSS, implementing measures to revoke problematic root certificates.
An update that contains security fixes can now be An update that contains security fixes can now be An update that contains security fixes can now be installed

Description

The mozilla NSS libraries were updated to 3.12.11 to align

with newer Mozilla seamonkey and Firefox releases.

Interesting changes are:

- blacklisting malicious root certificates

- several bugfixes

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch libfreebl3-5023

- openSUSE 11.3:

zypper in -t patch libfreebl3-5023

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64) [New Version: 3.12.11]:

libfreebl3-3.12.11-1.3.1

libsoftokn3-3.12.11-1.3.1

mozilla-nss-3.12.11-1.3.1

mozilla-nss-certs-3.12.11-1.3.1

mozilla-nss-devel-3.12.11-1.3.1

mozilla-nss-sysinit-3.12.11-1.3.1

mozilla-nss-tools-3.12.11-1.3.1

- openSUSE 11.4 (x86_64) [New Version: 3.12.11]:

libfreebl3-32bit-3.12.11-1.3.1

libsoftokn3-32bit-3.12.11-1.3.1

mozilla-nss-32bit-3.12.11-1.3.1

mozilla-nss-certs-32bit-3.12.11-1.3.1

mozilla-nss-sysinit-32bit-3.12.11-1.3.1

- openSUSE 11.3 (i586 x86_64) [New Version: 3.12.11]:

libfreebl3-3.12.11-1.2.1

libsoftokn3-3.12.11-1.2.1

mozilla-nss-3.12.11-1.2.1

mozilla-nss-certs-3.12.11-1.2.1

mozilla-nss-devel-3.12.11-1.2.1

mozilla-nss-sysinit-3.12.11-1.2.1

mozilla-nss-tools-3.12.11-1.2.1

- openSUSE 11.3 (x86_64) [New Version: 3.12.11]:

libfreebl3-32bit-3.12.11-1.2.1

libsoftokn3-32bit-3.12.11-1.2.1

mozilla-nss-32bit-3.12.11-1.2.1

mozilla-nss-certs-32bit-3.12.11-1.2.1

mozilla-nss-sysinit-32bit-3.12.11-1.2.1

References

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2011:0935-1
Rating: important
Affected Products: openSUSE 11.4 openSUSE 11.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here