SUSE · Security update for mozilla-nss
Affects SUSESource GCVE Database
Rated by Threat Radar
Data as of 7 Nov 2026, 12:04 UTC
What to do
AI-suggested
Apply the security update to mozilla-nss that includes version 3.125.1 or later to address these issues. Since this is an official security update, deploying the provided patch or updated package from the vendor is the recommended remediation.
Description
This security update for mozilla-nss addresses multiple issues including the removal of compromised eMudhra Intermediates CA and several bug fixes and hardening improvements in NSS version 3.125.1. The update includes fixes for session caching when ECH is rejected, DTLS handshake message handling, initialization and ordering in cryptographic functions, integer overflow hardening, AES GCM parameter serialization, HMAC truncation handling, and rejection of short ciphertexts.
References
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/suse-su-2026_5126-1.json (opens in a new tab)
- suse.com/support/update/announcement/2026/suse-su-20265126-1/ (opens in a new tab)
- bugzilla.suse.com/1286261 (opens in a new tab)
- bugzilla.suse.com/1289144 (opens in a new tab)