SUSE-RU-2015:0591-1

    Dashboard / Vulnerabilities / SUSE-RU-2015:0591-1

    SUSE-RU-2015:0591-1

    Published: 22 Aug 2014Last Modified: 4 Feb 2026
    Upstream:
    CVE-2013-4566
    Aliases:
    CVE-2013-4566

    Summary: Recommended update for apache2-mod_nss

    Details: This update brings several improvements to apache2-mod_nss. * More TLS 1.2 ciphers have been added, including AES-GCM and Camelia ciphers. These can be selected by their tags: o rsa_aes_128_sha256 o rsa_aes_128_gcm_sha o rsa_aes_256_sha256 o rsa_camellia_128_sha o rsa_camellia_256_sha o ecdh_ecdsa_aes_128_gcm_sha o ecdhe_ecdsa_aes_128_sha256 o ecdhe_ecdsa_aes_128_gcm_sha o ecdh_rsa_aes_128_gcm_sha o ecdhe_rsa_aes_128_sha256 * The mod_nss.conf.in template was updated to include those ciphers. (bnc#863035) * VirtualHost settings in /etc/apache2/conf.d/mod_nss.conf is now externalized to /etc/apache2/vhosts.d/vhost-nss.template and not activated/read by default. (bnc#878681) * The Server Name Indication (SNI) extension was implemented. * Reading the pass phrase during start-up was improved. (bnc#863518)

    References: https://www.suse.com/support/update/announcement//suse-ru-20150591-1/, https://bugzilla.suse.com/847216, https://bugzilla.suse.com/853039, https://bugzilla.suse.com/863035, https://bugzilla.suse.com/863518, https://bugzilla.suse.com/864929, https://bugzilla.suse.com/878681, https://bugzilla.suse.com/897712, https://bugzilla.suse.com/902068, https://www.suse.com/security/cve/CVE-2013-4566

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-RU-2015:0591-1 | CVE-DB