Rocky Linux 8.6 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel Multiple Vulnerabilities (ciqsa-2026_1296)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261296 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2024-6604, CVE-2024-6602, CVE-2024-6601, CVE-2024-6603...

Rocky Linux 8.6 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel Multiple Vulnerabilities (ciqsa-2026_1214)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261214 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.6 Certified. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: nspr / nspr-devel / nss / nss-debuginfo / nss-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0623)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260623 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 9.2 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 9 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel Multiple Vulnerabilities (ciqsa-2026_1215)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261215 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 9. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has extracted the...

Rocky Linux 8.6 [CIQ] Security Update: nspr-debuginfo Multiple Vulnerabilities (ciqsa-2026_1226)

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261226 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.6 Compliant. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 8.10 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-devel Multiple Vulnerabilities (ciqsa-2026_1216)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261216 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ FIPS 8.10 Certified. It addresses 2 CVEs: CVE-2021-43527, CVE-2023-0767. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ciqsa-2026_0467)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260467 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-5388. Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2026:1785841535)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785841535 advisory. - An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox 122,...

Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen (critical)

openSUSE security update: security update for mozillafirefox, mozilla-nss, mozilla-nspr, rust-cbindgen ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21713-1 Rating: critical References: bsc1262698 bsc1262701 bsc1266262 bsc1266263 bsc1271649...

Updated nspr, nss, & firefox packages fix security vulnerabilities

Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74934 Privilege escalation in the DOM: Networking component. CVE-2026-74935 Use-after-free in the JavaScript: WebAssembly component. CVE-2026-74936 Use-after-free in the JavaScript: GC component. CVE-2026-74937 Mitigation bypas...

SUSE-SU-2026:23590-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...

Updated nspr, nss and firefox(-l10n) packages fix security issues

The updated packages fix security vulnerabilities: Incorrect boundary conditions in the Audio/Video: Web Codecs component. CVE-2026-8946 Incorrect boundary conditions in the JavaScript Engine: JIT component. CVE-2026-8388 Use-after-free in the DOM: Bindings WebIDL component. CVE-2026-8947 Other...

Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2026-1703)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1703 advisory. Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. CVE-2026-6766 Other...

MiracleLinux 8 : nspr-4.32.0-1.el8, nss-3.67.0-6.el8 (AXSA:2021-2445:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2445:02 advisory. nss: TLS 1.3 CCS flood remote DoS Attack CVE-2020-25648 Tenable has extracted the preceding description block directly from the MiracleLinux security advisor...

MiracleLinux 3 : nspr-4.10.2-2.AXS3, nss-3.15.3-4.AXS3 (AXSA:2014-237:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-237:01 advisory. nss: Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

MiracleLinux 8 : nspr-4.25.0-2.el8, nss-3.53.1-11.0.1.el8 (AXSA:2020-690:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-690:01 advisory. nss: UAF in sftkFreeSession due to improper refcounting CVE-2019-11756 nss: Check length of inputs for cryptographic primitives CVE-2019-17006 nss:...

MiracleLinux 7 : nspr-4.10.8-2.el7, nss-3.19.1-7.el7.2, nss-util-3.19.1-4.el7 (AXSA:2015-533:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-533:01 advisory. nspr NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal fi...

MiracleLinux 4 : nspr-4.10.8-2.AXS4, nss-util-3.19.1-2.AXS4, nss-3.19.1-5.AXS4 (AXSA:2015-535:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-535:01 advisory. nspr NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal fi...

MiracleLinux 3 : firefox-3.0.15-3.1AXS3 (AXSA:2009-419:04)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-419:04 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. NSPR provides platform independence fo...

MGASA-2025-0328 Updated nspr, nss & firefox packages fix security vulnerabilities

Use-after-free in the WebRTC: Signaling component. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2025-14322 Privilege escalation in the DOM: Notifications component. CVE-2025-14323 JIT miscompilation in the JavaScript Engine: JIT...