SUSE-SU-2025:3760-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:3760-1

UNKNOWN

Security update for mozilla-nss

Published Oct 23, 2025

Modified 4 months ago

Fix available

Details

This update for mozilla-nss fixes the following issues:

Move NSS DB password hash away from SHA-1.

Update to NSS 3.112.2:

Prevent leaks during pkcs12 decoding.
SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates

Update to NSS 3.112.1:

restore support for finding certificates by decoded serial number.

Affected Packages(12 packages)

libfreebl3

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

libfreebl3-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

3.112.2-150000.3.132.1

libsoftokn3

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

libsoftokn3-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-certs

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-certs-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

3.112.2-150000.3.132.1

mozilla-nss-sysinit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

3.112.2-150000.3.132.1

References

REPORT

https://bugzilla.suse.com/1251263

WEB

https://www.suse.com/security/cve/CVE-2025-9187

ADVISORY

https://www.suse.com/support/update/announcement/2025/suse-su-20253760-1/

Upstream

CVE-2025-9187

Ecosystems(6)

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 15 SP3-LTSS

Timeline

PublishedOct 23, 2025

ModifiedOct 23, 2025