{"id":"SUSE-SU-2026:5126-1","summary":"Security update for mozilla-nss","details":"This update for mozilla-nss fixes the following issue:\n\n- remove compromised eMudhra Intermediates CA (bsc#1286261).\n\nChanges for mozilla-nss:\n\n- update to NSS 3.125.1 (bsc#1289144):\n * bmo#2088196 - backport nssckbi 2.92.\n * bmo#2082793 - Don't cache sessions when ECH was rejected.\n * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer.\n * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init.\n * bmo#2082027 - reorder session context setup in sftk_doMACInit.\n * bmo#2054723 - harden against integer overflows in lowpbe.c.\n * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism.\n * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs.\n * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2.\n","modified":"2026-11-07T11:30:04.131592066Z","published":"2026-11-06T08:27:07Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265126-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1286261"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289144"}],"affected":[{"package":{"name":"mozilla-nss","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","purl":"pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125.1-58.152.1"}]}],"ecosystem_specific":{"binaries":[{"libsoftokn3":"3.125.1-58.152.1","libfreebl3":"3.125.1-58.152.1","libsoftokn3-32bit":"3.125.1-58.152.1","mozilla-nss":"3.125.1-58.152.1","libfreebl3-32bit":"3.125.1-58.152.1","mozilla-nss-certs-32bit":"3.125.1-58.152.1","mozilla-nss-certs":"3.125.1-58.152.1","mozilla-nss-devel":"3.125.1-58.152.1","mozilla-nss-sysinit-32bit":"3.125.1-58.152.1","mozilla-nss-32bit":"3.125.1-58.152.1","mozilla-nss-tools":"3.125.1-58.152.1","mozilla-nss-sysinit":"3.125.1-58.152.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5126-1.json"}},{"package":{"name":"mozilla-nss","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","purl":"pkg:rpm/suse/mozilla-nss&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125.1-58.152.1"}]}],"ecosystem_specific":{"binaries":[{"libfreebl3-32bit":"3.125.1-58.152.1","mozilla-nss-sysinit-32bit":"3.125.1-58.152.1","libsoftokn3":"3.125.1-58.152.1","mozilla-nss-32bit":"3.125.1-58.152.1","mozilla-nss-certs-32bit":"3.125.1-58.152.1","mozilla-nss-certs":"3.125.1-58.152.1","mozilla-nss-sysinit":"3.125.1-58.152.1","libfreebl3":"3.125.1-58.152.1","libsoftokn3-32bit":"3.125.1-58.152.1","mozilla-nss-devel":"3.125.1-58.152.1","mozilla-nss-tools":"3.125.1-58.152.1","mozilla-nss":"3.125.1-58.152.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5126-1.json"}}],"schema_version":"1.9.2"}