This update for mozilla-nss fixes the following issues:
Update to NSS 3.112.3:
* CVE-2026-2781: Avoid integer overflow in platform-independent ghash
(bsc#1258568)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-813=1
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2026-813=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-813=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-813=1
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-813=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-813=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-813=1
* Basesystem Module 15-SP7
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-813=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-813=1
* SUSE Linux Enterprise High...
Read the Full Advisory* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)
* libfreebl3-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-debugsource-3.112.3-150400.3.63.1
* mozilla-nss-sysinit-3.112.3-150400.3.63.1
* mozilla-nss-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-certs-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-certs-3.112.3-150400.3.63.1
* libsoftokn3-3.112.3-150400.3.63.1
* mozilla-nss-tools-3.112.3-150400.3.63.1
* mozilla-nss-devel-3.112.3-150400.3.63.1
* mozilla-nss-sysinit-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-tools-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-3.112.3-150400.3.63.1
* libfreebl3-3.112.3-150400.3.63.1
* libsoftokn3-debuginfo-3.112.3-150400.3.63.1
* openSUSE Leap 15.4 (x86_64)
* libfreebl3-32bit-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-sysinit-32bit-3.112.3-150400.3.63.1
* libfreebl3-32bit-3.112.3-150400.3.63.1
* mozilla-nss-certs-32bit-debuginfo-3.112.3-150400.3.63.1
* mozilla-nss-32bit-3.112.3-150400.3.63.1
* libsoftokn3-32bit-debuginfo-3.112.3-150400.3.63.1
*...
Read the Full Advisory* bsc#1258568
## References:
* https://www.suse.com/security/cve/CVE-2026-2781.html
* https://bugzilla.suse.com/show_bug.cgi?id=1258568
Get the latest Linux and open source security news straight to your inbox.