Mozilla Firefox was updated to the Firefox ESR release 45.9.
Mozilla NSS was updated to support TLS 1.3 (close to release draft) and various new ciphers, PRFs, Diffie Hellman key agreement and support for more hashes.
Security issues fixed in Firefox (bsc#1035082)
Mozilla NSS was updated to 3.29.5, bringing new features and fixing bugs:
Update to NSS 3.29.5:
Update to NSS 3.29.3
Fixed a bug in hash computation (and build with GCC 7 which complains about shifts of boolean values). (bsc#1030071, bmo#1348767)
Update to NSS 3.28.3
This is a patch release to fix binary compatibility issues.
Update to NSS 3.28.1
This is a patch release to update the list of root CA certificates.
The following CA certificates were Removed
CN = Buypass Class 2 CA 1 CN = Root CA Generalitat Valenciana OU = RSA Security 2048 V3
The following CA certificates were Added
OU = AC RAIZ FNMT-RCM CN = Amazon Root CA 1 CN = Amazon Root CA 2 CN = Amazon Root CA 3 CN = Amazon Root CA 4 CN = LuxTrust Global Root 2 CN = Symantec Class 1 Public Primary Certification Authority - G4 CN = Symantec Class 1 Public Primary Certification Authority - G6 CN = Symantec Class 2 Public Primary Certification Authority - G4 CN = Symantec Class 2 Public Primary Certification Authority - G6
The version number of the updated root CA list has been set to 2.11
Update to NSS 3.28
New functionality:
NSS includes support for TLS 1.3 draft -18. This includes a number of improvements to TLS 1.3:
Notable Changes:
NSS now uses the signature schemes definition in TLS 1.3. This also affects TLS 1.2. NSS will now only generate signatures with the combinations of hash and signature scheme that are defined in TLS 1.3, even when negotiating TLS 1.2.
NSS will now check if RSA-PSS signing is supported by the token that holds the private key prior to using it for TLS.
Update to NSS 3.27.2
Fixed SSL_SetTrustAnchors leaks (bmo#1318561)
raised the minimum softokn/freebl version to 3.28 as reported in (boo#1021636)
Update to NSS 3.26.2
New Functionality:
Notable Changes:
Changes in 3.26.2
Update to NSS 3.25
New functionality:
Notable changes:
Update to NSS 3.24
New functionality:
Update to NSS 3.23
New functionality:
Notable changes:
The following CA certificates were Removed
The following CA certificates were Added
The following CA certificate had the Email trust bit turned on
Security fixes:
Update to NSS 3.22.3
Update to NSS 3.22.2
New functionality:
CVE-2016-8635: Fix for DH small subgroup confinement attack (bsc#1015547)
Mozilla NSPR was updated to version 4.13.1:
The previously released version 4.13 had changed pipes to be nonblocking by default, and as a consequence, PollEvent was changed to not block on clear. The NSPR development team received reports that these changes caused regressions in some applications that use NSPR, and it has been decided to revert the changes made in NSPR 4.13. NSPR 4.13.1 restores the traditional behavior of pipes and PollEvent.
Mozilla NSPR update to version 4.13 had these changes:
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "libfreebl3": "3.29.5-46.1", "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-tools": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1" } ] }
{ "binaries": [ { "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libfreebl3": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-x86": "3.29.5-46.1", "mozilla-nspr-x86": "4.13.1-32.1", "mozilla-nss-tools": "3.29.5-46.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libfreebl3-x86": "3.29.5-46.1", "libsoftokn3-x86": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1" } ] }
{ "binaries": [ { "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libfreebl3": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-x86": "3.29.5-46.1", "mozilla-nspr-x86": "4.13.1-32.1", "mozilla-nss-tools": "3.29.5-46.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libfreebl3-x86": "3.29.5-46.1", "libsoftokn3-x86": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1" } ] }
{ "binaries": [ { "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libfreebl3": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-x86": "3.29.5-46.1", "mozilla-nspr-x86": "4.13.1-32.1", "mozilla-nss-tools": "3.29.5-46.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libfreebl3-x86": "3.29.5-46.1", "libsoftokn3-x86": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1" } ] }
{ "binaries": [ { "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libfreebl3": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-x86": "3.29.5-46.1", "mozilla-nspr-x86": "4.13.1-32.1", "mozilla-nss-tools": "3.29.5-46.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libfreebl3-x86": "3.29.5-46.1", "libsoftokn3-x86": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1" } ] }
{ "binaries": [ { "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libfreebl3": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-x86": "3.29.5-46.1", "mozilla-nspr-x86": "4.13.1-32.1", "mozilla-nss-tools": "3.29.5-46.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libfreebl3-x86": "3.29.5-46.1", "libsoftokn3-x86": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1" } ] }
{ "binaries": [ { "MozillaFirefox": "45.9.0esr-71.2", "mozilla-nss-32bit": "3.29.5-46.1", "libfreebl3-32bit": "3.29.5-46.1", "libfreebl3": "3.29.5-46.1", "mozilla-nspr": "4.13.1-32.1", "MozillaFirefox-translations": "45.9.0esr-71.2", "mozilla-nss-x86": "3.29.5-46.1", "mozilla-nspr-x86": "4.13.1-32.1", "mozilla-nss-tools": "3.29.5-46.1", "libsoftokn3": "3.29.5-46.1", "mozilla-nspr-32bit": "4.13.1-32.1", "libfreebl3-x86": "3.29.5-46.1", "libsoftokn3-x86": "3.29.5-46.1", "mozilla-nss": "3.29.5-46.1", "libsoftokn3-32bit": "3.29.5-46.1" } ] }