PT-2026-21714

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description An integer overflow exists within the Libraries component of NSS. This issue may lead to...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation...

MGASA-2025-0328 Updated nspr, nss & firefox packages fix security vulnerabilities

Use-after-free in the WebRTC: Signaling component. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2025-14322 Privilege escalation in the DOM: Notifications component. CVE-2025-14323 JIT miscompilation in the JavaScript Engine: JIT...

firefox security update

140.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.6.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.6.0-1 - Update to 140.6.0 ESR...

Oracle Linux 10 : firefox (ELSA-2025-21281)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-21281 advisory. 140.5.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

Oracle Linux 8 : firefox (ELSA-2025-22363)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-22363 advisory. 140.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.5.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 9 : thunderbird (ELSA-2025-21842)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-21842 advisory. 140.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.5.0-1 - Update to 140.5.0 ESR Tenable has extracted the preceding...

Mozilla Firefox ESR < 52.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-12 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990474 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap Limit max values for vht mcs and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989716 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: limit injected vht mcs/nss in ieee80211parsetxradiotap Limit max values for vht mcs and...

SUSE: Security Advisory (SUSE-SU-2025:3804-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:3804-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2025:3804-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3804-1 advisory. - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding...

SUSE-SU-2025:3804-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...

SUSE: Security Advisory (SUSE-SU-2025:3759-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:3760-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2025-2515 sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

SUSE SLES15: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2025:3760-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3760-1 advisory. - Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has...

Oracle Linux 9 : thunderbird (ELSA-2025-18321)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-18321 advisory. 140.4.0-2.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.4.0 - Add OpenELA debranding 140.4.0-2 - Update to 140.4.0 ESR Tenable h...

Oracle Linux 8 : firefox (ELSA-2025-18285)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-18285 advisory. 140.4.0-3.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.4.0-3 - Update to 140.4.0 ESR Tenable has extracted the preceding...