Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:3760-1

UNKNOWN

Security update for mozilla-nss

Published Oct 23, 2025

Modified 2 months ago

Fix available

Details

This update for mozilla-nss fixes the following issues:

Move NSS DB password hash away from SHA-1.

Update to NSS 3.112.2:

Prevent leaks during pkcs12 decoding.
SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates

Update to NSS 3.112.1:

restore support for finding certificates by decoded serial number.

Affected Packages

SUSE:Enterprise Storage 7.1libfreebl3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1libfreebl3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1libsoftokn3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1libsoftokn3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-certs

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-certs-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-devel

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-sysinit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-sysinit-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Enterprise Storage 7.1mozilla-nss-tools

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibfreebl3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibfreebl3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsoftokn3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSlibsoftokn3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-certs

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-certs-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-devel

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-sysinit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-sysinit-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSmozilla-nss-tools

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.1libfreebl3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.1libsoftokn3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.1mozilla-nss

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.1mozilla-nss-certs

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.1mozilla-nss-tools

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.2libfreebl3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.2libsoftokn3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.2mozilla-nss

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.2mozilla-nss-certs

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Micro 5.2mozilla-nss-tools

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibfreebl3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibfreebl3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsoftokn3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSlibsoftokn3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-certs

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-certs-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-devel

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-sysinit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-sysinit-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server 15 SP3-LTSSmozilla-nss-tools

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libfreebl3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libfreebl3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsoftokn3

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3libsoftokn3-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-certs

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-certs-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-devel

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-sysinit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-sysinit-32bit

Fixed in:

3.112.2-150000.3.132.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3mozilla-nss-tools

Fixed in:

3.112.2-150000.3.132.1

Timeline

PublishedOct 23, 2025

ModifiedOct 23, 2025

SUSE-SU-2025:3760-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:3760-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline