SUSE-SU-2025:3760-1

HIGH8.8

Security update for mozilla-nss

Published Oct 23, 2025

Modified 8 months ago

Fix available

Details

Description of the patch:

This update for mozilla-nss fixes the following issues:

Move NSS DB password hash away from SHA-1.

Update to NSS 3.112.2:

Prevent leaks during pkcs12 decoding.
SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates

Update to NSS 3.112.1:

restore support for finding certificates by decoded serial number.

Affected Packages(12 packages)

libfreebl3

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2

Fixed in:

3.112.2-150000.3.132.1

libfreebl3-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

libsoftokn3

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2

Fixed in:

3.112.2-150000.3.132.1

libsoftokn3-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-certs

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-certs-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-sysinit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

References

https://bugzilla.suse.com/1251263

https://lists.suse.com/pipermail/sle-updates/2025-October/042281.html

https://www.suse.com/security/cve/CVE-2025-9187/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2025/suse-su-20253760-1/

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

Ecosystems(8)

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2

Timeline

PublishedOct 23, 2025

ModifiedOct 23, 2025

SUSE-SU-2025:3760-1 | Mondoo Vulnerability Intelligence