SUSE-SU-2026:5126-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20265126-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5126-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:5126-1
- Published
- 2026-11-06T08:27:07Z
- Modified
- 2026-11-07T11:30:04Z
- Summary
- Security update for mozilla-nss
- Details
-
This update for mozilla-nss fixes the following issue:
- remove compromised eMudhra Intermediates CA (bsc#1286261).
Changes for mozilla-nss:
- update to NSS 3.125.1 (bsc#1289144):
- bmo#2088196 - backport nssckbi 2.92.
- bmo#2082793 - Don't cache sessions when ECH was rejected.
- bmo#2082792 - Keep DTLS handshake messages whole in the send buffer.
- bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init.
- bmo#2082027 - reorder session context setup in sftk_doMACInit.
- bmo#2054723 - harden against integer overflows in lowpbe.c.
- bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism.
- bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs.
- bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2.
- References
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / mozilla-nss
Package
- Name
- mozilla-nss
- Purl
- pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.125.1-58.152.1
Ecosystem specific
{
"binaries": [
{
"libfreebl3": "3.125.1-58.152.1",
"libfreebl3-32bit": "3.125.1-58.152.1",
"libsoftokn3": "3.125.1-58.152.1",
"libsoftokn3-32bit": "3.125.1-58.152.1",
"mozilla-nss": "3.125.1-58.152.1",
"mozilla-nss-32bit": "3.125.1-58.152.1",
"mozilla-nss-certs": "3.125.1-58.152.1",
"mozilla-nss-certs-32bit": "3.125.1-58.152.1",
"mozilla-nss-devel": "3.125.1-58.152.1",
"mozilla-nss-sysinit": "3.125.1-58.152.1",
"mozilla-nss-sysinit-32bit": "3.125.1-58.152.1",
"mozilla-nss-tools": "3.125.1-58.152.1"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / mozilla-nss
Package
- Name
- mozilla-nss
- Purl
- pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.125.1-58.152.1
Ecosystem specific
{
"binaries": [
{
"libfreebl3": "3.125.1-58.152.1",
"libfreebl3-32bit": "3.125.1-58.152.1",
"libsoftokn3": "3.125.1-58.152.1",
"libsoftokn3-32bit": "3.125.1-58.152.1",
"mozilla-nss": "3.125.1-58.152.1",
"mozilla-nss-32bit": "3.125.1-58.152.1",
"mozilla-nss-certs": "3.125.1-58.152.1",
"mozilla-nss-certs-32bit": "3.125.1-58.152.1",
"mozilla-nss-devel": "3.125.1-58.152.1",
"mozilla-nss-sysinit": "3.125.1-58.152.1",
"mozilla-nss-sysinit-32bit": "3.125.1-58.152.1",
"mozilla-nss-tools": "3.125.1-58.152.1"
}
]
}