{"id":"openSUSE-SU-2026:22159-1","summary":"Security update for mozilla-nss, MozillaFirefox","details":"This update for mozilla-nss, MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 153.5.1 ESR (MFSA 2026-112, bsc#1286385):\n\n- CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component\n  (bsc#1286261).\n","modified":"2026-10-24T17:23:12.295338865Z","published":"2026-10-23T12:12:13Z","related":["CVE-2026-113470"],"upstream":["CVE-2026-113470"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1286261"},{"type":"REPORT","url":"https://bugzilla.suse.com/1286385"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-113470"}],"affected":[{"package":{"name":"MozillaFirefox","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.5.1-160000.1.1"}]}],"ecosystem_specific":{"binaries":[{"MozillaFirefox-translations-other":"153.5.1-160000.1.1","mozilla-nss-certs":"3.125-160000.3.1","MozillaFirefox-branding-upstream":"153.5.1-160000.1.1","mozilla-nss-sysinit":"3.125-160000.3.1","mozilla-nss-tools":"3.125-160000.3.1","mozilla-nss-devel":"3.125-160000.3.1","libsoftokn3":"3.125-160000.3.1","MozillaFirefox":"153.5.1-160000.1.1","MozillaFirefox-devel":"153.5.1-160000.1.1","libfreebl3":"3.125-160000.3.1","MozillaFirefox-translations-common":"153.5.1-160000.1.1","mozilla-nss":"3.125-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22159-1.json"}},{"package":{"name":"mozilla-nss","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/mozilla-nss&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"MozillaFirefox-devel":"153.5.1-160000.1.1","libsoftokn3":"3.125-160000.3.1","libfreebl3":"3.125-160000.3.1","MozillaFirefox-branding-upstream":"153.5.1-160000.1.1","mozilla-nss-sysinit":"3.125-160000.3.1","mozilla-nss-tools":"3.125-160000.3.1","mozilla-nss-certs":"3.125-160000.3.1","MozillaFirefox-translations-other":"153.5.1-160000.1.1","mozilla-nss":"3.125-160000.3.1","mozilla-nss-devel":"3.125-160000.3.1","MozillaFirefox-translations-common":"153.5.1-160000.1.1","MozillaFirefox":"153.5.1-160000.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22159-1.json"}}],"schema_version":"1.9.0"}