Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: update to NSS 3.112.3: * CVE-2026-2781: Avoid integer overflow in platform-independent ghash (bsc#1258568)
- Update to 3.112.3-150000.3.135.1
Published Updated
PatchFirst · Latest vulnerabilities
mozilla-nss vulnerabilities
Vulnerabilities published for mozilla-nss in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 8
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: * Prevent leaks during pkcs12 decoding. * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: * restore support for finding certificates by decoded serial number.
- Update to 3.112.2-150000.3.132.1
Published UpdatedSecurity update for mozilla-nss
This update for mozilla-nss fixes the following issues: - FIPS: Added more safe memset (bsc#1222811). - FIPS: Adjusted AES GCM restrictions (bsc#1222830). - FIPS: Adjusted approved ciphers (bsc#1222813, bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118, bsc#1222807, bsc#1222828, bsc#1222834, bsc#1222804, bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116). Update to NSS 3.101.1: * GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME. update to NSS 3.101: * add diagnostic assertions for SFTKObject refcount. * freeing the slot in DeleteCertAndKey if authentication failed * fix formatting issues. * Add Firmaprofesiona
- Update to 3.101.1-150000.3.117.1
Published UpdatedSecurity update for mozilla-nss
This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: - CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)
- Update to 3.90.2-150000.3.108.1
Published UpdatedSecurity update for mozilla-nss
This update for mozilla-nss fixes the following issues: Updated to NSS 3.79.4 (bsc#1208138): - CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.
- Update to 3.79.4-150000.3.93.1
Published UpdatedSecurity update for mozilla-nss
This update for mozilla-nss fixes the following issues: - CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272). - Updated to version 3.79.3 (bsc#1207038): - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
- Update to 3.79.3-150000.3.90.1
Published UpdatedSecurity update for mozilla-nss
This update for mozilla-nss fixes the following issues: Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4: - Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). - FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck() (bsc#1198980). - FIPS: mark algorithms as approved/non-approved according to security policy (bsc#1191546, bsc#1201298). - FIPS: remove hard disabling of unapproved algorithms. This requirement is now fulfilled by the service level indicator (bsc#1200325). - Run test suite at build time, and make it pass (bsc#1198486). - FIPS: skip algorit
- Update to 3.79-150000.3.74.1
Published UpdatedSecurity update for mozilla-nss
This update for mozilla-nss fixes the following issues: Mozilla NSS 3.68.3 (bsc#1197903): - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use.
- Update to 3.68.3-150000.3.67.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.