OPENSUSE-SU-2025:15172-1 libmozjs-128-0-128.10.1-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

NSS 安全漏洞

NSS is an underlying cryptography library from the Mozilla Foundation. The library supports a variety of cryptographic algorithms, and the Firefox browser's TLS implementation is based on this library. A security vulnerability exists in NSS that stems from a crash without a user's credentials in...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this function after liberation in CERTDestroyCertificate in libnss3.so within the NSS Mozilla library for Firefox allows malicious actors operating remotely to execute arbitrary code, thereby improperly deleting the NSSCertificate structure from the trusted domain...

The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the integrity of protected information

The vulnerability exists in the certTestHostName function in lib/certdb/certdb.c, which is part of the certificate verification mechanism in the Mozilla NSS library. It stems from groups of characters embedded in the U-label for internationalized domain names. Exploiting this vulnerability allows...

The vulnerability of the Oracle Fusion Middleware software allows a remote attacker to replace the RSA signature.

The vulnerability of the Oracle Fusion Middleware software exists in the NSS Network Security Services library of Mozilla, which is used by the Oracle iPlanet Web Server. This vulnerability stems from incorrect processing of ASN.1 values in H.509 certificates. Exploiting this vulnerability could...

Immunity Canvas: NSS

Name| nss ---|--- CVE| CVE-2004-0826 Exploit Pack| CANVAS Description| NSS overflow Notes| CVE Name: CVE-2004-0826 VENDOR: Mozilla References: http://www.osvdb.org/displayvuln.php?osvdbid=9116 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0826 Date public: 23 of August, 2004...