Security update for apache2-mod_nss SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3572-1 Final 1 1 2018-10-30T12:31:24Z current 2018-10-30T12:31:24Z 2018-10-30T12:31:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for apache2-mod_nss This update for apache2-mod_nss fixes the following issues: Due to the update of mozilla-nss apache2-mod_nss needs to be updated to change to the SQLite certificate database, which is now the default (bsc#1108771). Because of that this update is tagged as security, to reach customers that only install secuirty updates. Other changes contained: - Require minimal NSS version of 3.25 because of SSLv2 changes (bsc#993642) - Add support for SHA384 TLS ciphers (bsc#863035) - Remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in (bsc#998176) - Change ownership of the gencert generated NSS database so apache can read it (bsc#998180) - Use correct configuration path in mod_nss.conf.in (bsc#996282) - Generate dummy certificates if there aren't any in mod_nss.d (bsc#998183) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-SERVER-12-2018-2527 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183572-1/ Link for SUSE-SU-2018:3572-1 https://lists.suse.com/pipermail/sle-security-updates/2018-October/004814.html E-Mail link for SUSE-SU-2018:3572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1108771 SUSE Bug 1108771 https://bugzilla.suse.com/863035 SUSE Bug 863035 https://bugzilla.suse.com/993642 SUSE Bug 993642 https://bugzilla.suse.com/996282 SUSE Bug 996282 https://bugzilla.suse.com/998176 SUSE Bug 998176 https://bugzilla.suse.com/998180 SUSE Bug 998180 https://bugzilla.suse.com/998183 SUSE Bug 998183 SUSE Linux Enterprise Server 12-LTSS apache2-mod_nss-1.0.14-10.17.2 apache2-mod_nss-1.0.14-10.17.2 as a component of SUSE Linux Enterprise Server 12-LTSS