SUSE-SU-2026:23411-1
Vulnerability from csaf_suse - Published: 2026-08-31 16:16 - Updated: 2026-09-16 20:15Summary
Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
Severity
Critical
Notes
Title of the patch: Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen
Description of the patch: This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues:
Changes in MozillaFirefox:
Firefox Extended Support Release 153.1.0 ESR.
* Fixed: Various security fixes.
MFSA 2026-77 (bsc#1274867):
* CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL component
* CVE-2026-74935 Privilege escalation in the DOM: Networking component
* CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component
* CVE-2026-74937 Use-after-free in the JavaScript: GC component
* CVE-2026-74938 Mitigation bypass in the JavaScript: GC component
* CVE-2026-74939 Privilege escalation in the DOM: Navigation component
* CVE-2026-74940 Use-after-free in the Graphics: Text component
* CVE-2026-74941 Privilege escalation in the Graphics: CanvasWebGL component
* CVE-2026-74942 Privilege escalation in the Remote Settings Client component
* CVE-2026-74943 Use-after-free in the Graphics: ImageLib component
* CVE-2026-74944 Use-after-free in the DOM: Core & HTML component
* CVE-2026-74945 Information disclosure in the Graphics: Text component
* CVE-2026-74946 Privilege escalation due to incorrect boundary conditions in
the Graphics: CanvasWebGL component
* CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics
component
* CVE-2026-74948 Information disclosure in the Graphics component
* CVE-2026-74949 Privilege escalation due to use-after-free in the Graphics:
Canvas2D component
* CVE-2026-74950 Privilege escalation in the Downloads API component
* CVE-2026-74953 Privilege escalation in the Networking: Cookies component
* CVE-2026-74954 Information disclosure due to side-channel in the Storage:
Cache API component
* CVE-2026-74955 Privilege escalation in the Request Handling component
* CVE-2026-74956 Same-origin policy bypass in the DOM: Service Workers
component
* CVE-2026-74957 Mitigation bypass in the Safe Browsing component
* CVE-2026-74958 Information disclosure in the WebRTC component
* CVE-2026-74959 Mitigation bypass in the Storage: Cache API component
* CVE-2026-74960 Site isolation issue in the WebExtensions component
* CVE-2026-74961 Side-channel in the Web Audio component
* CVE-2026-74962 Site isolation issue in the Networking: Cookies component
* CVE-2026-74963 Same-origin policy bypass in the Networking: Cookies
component
* CVE-2026-74964 Integer overflow in the Graphics component
* CVE-2026-74965 Privilege escalation in the Shell Integration component
* CVE-2026-74966 Information disclosure in the Form Autofill component
* CVE-2026-74967 Same-origin policy bypass in the Audio/Video: Playback
component
* CVE-2026-74968 Site isolation issue in the Graphics: WebRender component
* CVE-2026-74969 Use-after-free in the Layout: Text and Fonts component
* CVE-2026-74970 Site isolation issue in the Graphics component
* CVE-2026-74971 Information disclosure in the DOM: UI Events & Focus Handling
component
* CVE-2026-74972 Information disclosure in the DOM: Push Subscriptions
component
* CVE-2026-74973 Race condition, use-after-free in the Graphics component
* CVE-2026-74974 Same-origin policy bypass in the Graphics: ImageLib component
* CVE-2026-74976 JIT miscompilation in the JavaScript Engine: JIT component
* CVE-2026-74977 Integer overflow in the Graphics component
* CVE-2026-74978 Clickjacking issue in the Widget component
* CVE-2026-74979 Mitigation bypass in the Add-ons Manager component
* CVE-2026-74981 Site isolation issue in the Audio/Video: Web Codecs component
* CVE-2026-74982 Denial-of-service in the Widget component
* CVE-2026-74983 Mitigation bypass in the Data Loss Prevention component
* CVE-2026-74984 Race condition in the JavaScript Engine component
* CVE-2026-74985 Privilege escalation in the Enterprise Policies component
* CVE-2026-74986 Site isolation issue in the CSS Parsing and Computation
component
* CVE-2026-74987 Internally found bugs fixed in Firefox ESR 140.14, Firefox
ESR 153.1 and Firefox 154
* CVE-2026-74988 Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154
* CVE-2026-74990 Internally found bugs fixed in Firefox ESR 115.39, Firefox
ESR 140.14, Firefox ESR 153.1 and Firefox 154
Firefox Extended Support Release 153.0esr ESR
* New: ## General
- Firefox now includes a new profile management system that
helps you separate your online life into distinct profiles
for work, school, vacation planning, or whatever you choose.
Profiles can be customized with names, avatars, and color
themes while keeping tabs, bookmarks, passwords, and browsing
history separate. Built-in profile backup and restore also
makes it easier to migrate to a new device or recover your
browsing data.
- Split View lets you view two webpages side-by-side in a
single browser window, with additional options to quickly
open links in Split View, rearrange pages, and search open
tabs.
- The Firefox address bar has gained several new
capabilities, including built-in unit and time zone
conversion, quick actions such as muting all browser audio,
and direct search results as you type.
- Firefox now supports copying links directly to highlighted
text on a webpage for easier sharing.
- Firefox Settings has been redesigned with improved
organization and navigation, making it easier to find and
customize browser preferences.
* New: ## AI
Firefox introduced several new AI-powered features, including
on-device tab organization, AI-assisted link previews,
integrated AI search, and centralized controls for managing
AI features. Whenever possible, these features perform
processing locally to help protect user privacy.
* New: ## Sidebar and Tabs
- Firefox continues to improve tab management with
enhancements to vertical tabs, tab groups, and the sidebar.
- Tab groups have gained numerous usability improvements,
including better support for collapsed groups, previews of
grouped tabs, and additional organization options.
- Passwords can now be accessed directly from the Firefox
sidebar without opening a separate tab.
- Firefox now supports copying links from one or multiple
background tabs directly from the tab context menu, and
multiple tabs can be copied or shared in a single action.
- A Send Tab toolbar button is now available through
Customize Toolbar.
* New: ## Security & Privacy
- Firefox has significantly expanded Fingerprinting
Protection, making it harder for websites to uniquely
identify users in both Standard and Strict Enhanced Tracking
Protection modes.
- Enhanced Tracking Protection includes stronger protections
against bounce tracking and additional safeguards that
restrict websites from accessing local network resources
without user permission.
- Firefox now uses Safe Browsing V5 for phishing and malware
protection.
- Firefox Password Manager now uses stronger AES-256
encryption to protect stored logins on disk.
- Private Browsing has been enhanced with new controls,
including the ability to instantly end a private browsing
session and temporarily relax tracker blocking for individual
sites when needed for compatibility.
* New: ## Translations
- Firefox has expanded on-device translation support with
many additional languages and continued improvements to
translation quality.
- A dedicated translations page now provides an easy way to
perform real-time translations directly within Firefox.
* New: ## Accessibility
- Firefox continues to improve accessibility with enhanced
support for assistive technologies, including Windows UI
Automation, improved keyboard navigation, more accessible
date and time controls, and better support for mathematical
content in PDFs.
* New: ## Linux
- Firefox now supports native fractional scaling on Wayland,
improving rendering on high-DPI displays.
- Firefox no longer requires a restart after package manager
updates and uses less memory on Linux.
- Firefox now supports the XDG Base Directory Specification
and ships with RPM packages for Red Hat, Fedora, openSUSE,
and other RPM-based distributions.
* HTML5: - Firefox now supports the View Transitions API for
creating smooth animated transitions between application
views.
- WebGPU support has expanded across supported platforms,
including Windows and Apple Silicon Macs.
- Added support for several modern web platform APIs,
improving compatibility with modern web applications. Notable
additions include the Navigation API, URLPattern, Trusted
Types, Sanitizer API, and Prioritized Task Scheduling.
* Enterprise: - Enterprise administrators can now centrally
manage Firefox's Generative AI features through enterprise
policy.
- Fixed a performance regression affecting native messaging,
improving responsiveness for enterprise extensions that
communicate with external applications.
- Enterprise policy documentation has moved to
https://firefox-admin-docs.mozilla.org/.
* Fixed: Various security fixes.
- MFSA 2026-68 (bsc#1271649):
* CVE-2026-16349
Same-origin policy bypass in the DOM: Navigation component
* CVE-2026-16350
Incorrect boundary conditions in the Audio/Video: cubeb
component
* CVE-2026-16362
Use-after-free in the WebRTC: Audio/Video component
* CVE-2026-16351
Sandbox escape due to use-after-free in the DOM: Navigation
component
* CVE-2026-16352
Sandbox escape due to use-after-free in the Disability Access
APIs component
* CVE-2026-16363
JIT miscompilation in the JavaScript: WebAssembly component
* CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback
component
* CVE-2026-16365
Privilege escalation in the DOM: Workers component
* CVE-2026-16366
Privilege escalation in the DOM: Navigation component
* CVE-2026-16353
Invalid pointer in the DOM: Bindings (WebIDL) component
* CVE-2026-16354
Information disclosure in the Graphics: ImageLib component
* CVE-2026-16367
Sandbox escape due to invalid pointer in the Disability
Access APIs component
* CVE-2026-16368
Incorrect boundary conditions in the JavaScript: WebAssembly
component
* CVE-2026-16369
Integer overflow in the JavaScript: WebAssembly component
* CVE-2026-16355
JIT miscompilation in the JavaScript Engine: JIT component
* CVE-2026-16356
Sandbox escape due to use-after-free in the Disability Access
APIs component
* CVE-2026-16357
Incorrect boundary conditions in the Graphics component
* CVE-2026-16370
Mitigation bypass in the DOM: Networking component
* CVE-2026-16371
Privilege escalation in the DOM: Navigation component
* CVE-2026-16372
Privilege escalation in the DOM: Content Processes component
* CVE-2026-16373
Information disclosure in the Privacy component in Firefox
for Android
* CVE-2026-16374
Information disclosure in the Framework component in DevTools
* CVE-2026-16375
Site isolation issue in the Networking: HTTP component
* CVE-2026-16376
Denial-of-service in the Graphics: WebGPU component
* CVE-2026-16377
Mitigation bypass in the PDF Viewer component
* CVE-2026-16378
Other issue in the DOM: Copy & Paste and Drag & Drop
component
* CVE-2026-16379
Privilege escalation in the DOM: Content Processes component
* CVE-2026-16358
Site isolation issue in the Graphics: WebRender component
* CVE-2026-16380
Mitigation bypass in the Networking component
* CVE-2026-16381
Same-origin policy bypass in the Networking: DNS component
* CVE-2026-16382
Mitigation bypass in the DOM: Service Workers component
* CVE-2026-16383
Mitigation bypass in the DOM: Networking component
* CVE-2026-16384
Information disclosure due to uninitialized memory in the
Graphics: WebGPU component
* CVE-2026-16385
Information disclosure due to uninitialized memory in the
Graphics: WebGPU component
* CVE-2026-16386
Information disclosure due to uninitialized memory in the
Graphics: WebGPU component
* CVE-2026-16387
Site isolation issue in the Networking component
* CVE-2026-16388
Sandbox escape in the DOM: Networking component
* CVE-2026-16389
Incorrect boundary conditions, integer overflow in the
Libraries component in NSS
* CVE-2026-16390
Mitigation bypass in the Enterprise Policies component
* CVE-2026-16391
Information disclosure in the Storage: IndexedDB component
* CVE-2026-16392
JIT miscompilation in the JavaScript Engine: JIT component
* CVE-2026-16393
Incorrect boundary conditions in the Graphics: WebGPU
component
* CVE-2026-16359
Incorrect boundary conditions in the Audio/Video: GMP
component
* CVE-2026-16394
Mitigation bypass in the DOM: Security component
* CVE-2026-16395
Integer overflow in the Audio/Video component
* CVE-2026-16396
Privilege escalation in WebExtensions
* CVE-2026-16397
Clickjacking issue in the WebExtensions component in Firefox
for Android
* CVE-2026-16398
Site isolation issue in the Graphics component
* CVE-2026-16399
Site isolation issue in the DOM: Navigation component
* CVE-2026-16400
Information disclosure in the DOM: Security component
* CVE-2026-16401
Privilege escalation in the Data Loss Prevention component
* CVE-2026-16402
Integer overflow in the Graphics: ImageLib component
* CVE-2026-16403
Spoofing issue in the Address Bar component
* CVE-2026-16404
Spoofing issue in Firefox for Android
* CVE-2026-16405
Information disclosure in the Networking: WebSockets
component
* CVE-2026-16406
Mitigation bypass in the Networking component
* CVE-2026-16407
Mitigation bypass in the DOM: Service Workers component
* CVE-2026-16408
Integer overflow in the Audio/Video: Playback component
* CVE-2026-16409
Invalid pointer in the Security: PSM component
* CVE-2026-16410
JIT miscompilation in the JavaScript Engine: JIT component
* CVE-2026-16411 Memory safety bugs fixed in Firefox 153
* CVE-2026-16412 Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153
* CVE-2026-16360 Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153
Changes in mozilla-nss:
- Add patch to prefer any hybrid PQC and send at most one hybrid key share
(bsc#1262698).
- Add a notice to the module ID when it's in non-FIPS mode (bsc#1266263).
- Import ML-DSA implementation and related PQC fixes from upstream (bsc#1262698, bsc#1272772).
- Add power-on self-tests (KATs) for ML-KEM and ML-DSA (bsc#1272773).
- Add zeroization for ML-KEM, ported from
upstream (bsc#1272774).
- Add zeroization for ML-DSA (bsc#1272774).
- Add ML-DSA robustness and test fixes.
- Add PQC algorithms to
approved list. Increase approved symmetric keygen floor to 112
bits (bsc#1262698). Approve non-NSS-aliased TLS 1.2 mechanisms
(bsc#1266262).
update to NSS 3.125
* Set nssckbi version to 2.88.
* Add Cybertrust Japan SecureSign Root CA16.
* Remove Email Trust bit from TrustAsia Global Root CA G3 and G4.
* Remove Entrust Root Certification Authority.
* Remove SecureSign Root CA12.
* Initialize ssl3.hs.echOuterExtensions in ssl_NewSocket.
* replace references to nss-dev/nss with mozilla/nss.
* limit recursion depth in CMS decoder.
* clamp input.len to testString size in pk11_mergeSecretKey.
* NULL pointer dereference in CERT_MergeExtensions.
* CERT_DecodeAVAValue — Integer Overflow in Output Buffer Sizing.
* fix two integer overflows on LLP64 systems.
* Modify an assertion in ssl3_ClientSendAppProtoXtn.
* Import RSA-PSS PKCS#8 private keys.
* Update fuzz/config/tstclnt_arguments.py.
* Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey.
* Adding a guard against integer overflow in AESKeyWrap_EncryptKWP.
* Add an integer overflow guard in UpdateBase64Decoder.
* Void out the fd.release in reconfig tests.
* make sftk_FindAttribute return a copy.
* Converted nss parameter schema from voluptuous to msgspec.
* drop slot monitor in PK11_ResetToken before calling PK11_InitToken.
* adjust the code to use nspr from github.
* avoid deadlock when PK11_IsLoggedIn is called from PK11_DoPassword.
* test pk11auth.c functions with a non-threadsafe module.
* PK11_InitPin sets slot->lastLoginCheck without holding the slot monitor.
* reject empty nickname in PK11_TraverseCertsForNicknameInSlot.
* validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen.
* guard space subtraction in ssl_CallCustomExtensionSenders.
* rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow.
* bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity.
* Set tail pointer to null in static slot lists when deallocating.
* avoid leaving a dangling ss->sec.ci.sid on allocation failure.
* guard against integer overflow in CERT_Hexify.
* Reject empty SECItem inputs in sftk_IsSafePrime before indexing data[len-1].
* NUL-terminate within filename field in jar_listtar to bound the filename scan.
* Widen CERT_FormatName length accumulator from unsigned to size_t.
* Bound IKE PRF nonce lengths to prevent CK_ULONG to unsigned int truncation.
* Drop companion arrays on length mismatch in NSS_CMSArray_Sort instead of asserting.
* Operate on a NUL-terminated copy in jar_parse_any to keep manifest scans bounded.
* Reject MD2 contexts with unusedBuffer > MD2_BUFSIZE in Update and End.
* Reserve NUL terminator for CKA_NSS_URL in nssCKObject_GetAttributes.
* Guard padding read against empty output in SEC_PKCS7DecryptContents.
* Guard against keySize overflow in IKE PRF/PRF+ output sizing.
* Allocate values array when overwriting an empty CMS attribute.
* Validate CKA_TOKEN attribute size in nssCKFWObject_SetAttribute.
* Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib.
* Handle zero-length input in PrepareBitStringForEncoding.
* Length-check raw_manifest before PORT_Strncasecmp prefix dispatch in JAR_parse_manifest.
* Reject CKA_NSS_MODULE_SPEC values that aren’t NUL-terminated within ulValueLen.
* Reject negative PR_Read returns in JAR_digest_file and jar_create_pk7.
* Update Bogo tests to 3fff7111b0eca817466e121059cb4e8b67ade35b.
* doc: import NSS:TryServer wiki page in the tree.
* improve PK11 URI tests.
* avoid nested attributeLock acquisition in sftk_CopyObject.
* doc: fix a typo in “Community — Network Security Services (NSS)”.
* acquire RWLock before key copies in ssl_SetSelfEncryptKeyPair.
* Reject empty nickname in PK11_TraverseCertsForNicknameInSlot.
* require non-null session pointer in sftk_GetContext.
* set session->lastOpWasFIPS while holding session reference.
* atomically claim object removal in sftk_DeleteObject.
* atomically swap session search in NSC_FindObjects*.
* atomically install session contexts in C_*Init.
* hold session reference for context lifetime in C_*Update.
* align softoken session lock with head-bucket hash.
* restore reference counting for SFTKSession.
- update to NSS 3.124
* Add test for PKCS7 digest array alignment
* Add test for rejection of excessively large ASN.1 SEQUENCE OF in quickder
* Add test for CMS content size validation
* Add regression tests for DSAU signature decoding
* Add test for S/MIME profile lookup on temp certs
* Test case for post-handshake auth and many certificate requests
* Add test for intra-arena ASan redzones
* update nss_status flags one at a time
* add defensive info->len check in PK11_HPKE_SetupS and PK11_HPKE_SetupR
* avoid PORT_Strdup in ssl_DecodeResumptionToken
* add runtime check on decoded resumption token session id
* improve mach try error handling
* clang format
* add comprehensive SECItem and SECItemArray tests
* add bugzilla_cf_status_nss.py script
* regenerate some recent release notes
* fix bug list output by release note and email scripts
* test removal from trust domain email cache
* fix "testing if key corruption is detected in attribute" failures with sqlite-3.53.0
* build sqlite3 shell for Windows CI runners
* avoid race with module unloading in NSSTrustDomain_FindTokensByURI
* add ImportEd25519WithNonEmptyAlgorithmParams test
* add CLAUDE.md and .mcp.json
* add a mach try command
* remove dead condition in sec_asn1d_check_and_subtract_length
* avoid integer truncation in nssCKObject_GetAttributes
* add defensive input validation to sftk_compute_ANSI_X9_63_kdf
* avoid refcount over-release in nssTokenObjectCache error path [@ nssToken_Destroy]
* sdb: enforce that metaData's id key is unique when reading
* improve handling of escape sequences in pk11uri_ParseAttributes
* use correct data for ID comparison in transfer_uri_certs_to_collection
* fix truncation of ulValueLen in sdb_FindObjectsInit
* reject DTLS 1.3 Server Hello after HVR without capping ss->vrange.max
* set previous-nss-release for abicheck
* Skip `PR_Sleep` yield for non-blocking sockets in `ssl3_SendApplicationData`
* consistently protect PK11SlotInfo::maxKeyCount with freeListLock
* Remove CRMF from testing and manifests
* Remove unused RSA blind signature implementation from freebl
- update to NSS 3.123.1
* reject DTLS 1.3 Server Hello after HVR without capping ss->vrange.max
- update to NSS 3.123
* https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/AW6VHkn6E0o
- update to NSS 3.122.2:
* reject DTLS 1.3 Server Hello after HVR without capping ss->vrange.max
- update to NSS 3.122.1
* improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
* Improving the allocation of S/MIME DecryptSymKey.
* store email on subject cache_entry in NSS trust domain.
* Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
* Improve size calculations in CMS content buffering.
* avoid integer overflow while escaping RFC822 Names.
* Reject excessively large ASN.1 SEQUENCE OF in quickder.
* Deep copy profile data in CERT_FindSMimeProfile.
* Improve input validation in DSAU signature decoding.
* avoid integer overflow in RSA_EMSAEncodePSS.
* Add a maximum cert uncompressed len and tests.
* Clarify extension negotiation mechanism for TLS Handshakes.
* make ss->ssl3.hs.cookie an owned-copy of the cookie.
- update to NSS 3.122
* ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
* run mach doc-lint from generate_release_doc.py.
* Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
* tls13_CopyEchConfigs uses PR_LIST_TAIL instead of loop variable.
* fix cipher spec count intermittent CI failures.
* fix Mlkem768x25519ShareDamager intermittent CI failures.
* lint the legacy documentation.
* lint the NSS 3.112.3 release notes.
* add a doc-lint CI job.
* Add more useful coverage reports to CI and fail if new commit isn't tested.
* wrong alert for malformed TLS 1.3 Finished.
* Swap order of asserts and state check.
* set correct value of unused curve parameters in tls13_HandleKeyShare.
* GCM needs to check for various limits in FIPS mode.
* Get Key Length not working from ED and Montgomery keys.
* Not all ike modes are FIPS approved. Adjust the indicators when they aren't.
* fix intermittent ssl.sh test failures on windows runners.
* FIPS indicators on HKDF needs to be restricted to TLS usage.
* Generate keys not getting indicators.
* improve error handling in smime_init_once.
* Detect CPU features on OpenBSD using elf_aux_info.
* RSA_EMSAEncodePSS should validate the length of mHash.
* more robustly distinguish SFTKSessionObject and SFTKTokenObjects.
* fix missing .S file error in Solaris Makefile builds.
* fix memory leak in NSC_GenerateKey error path.
* Missing SECFailure return after FATAL_ERROR in tls13_HandleEncryptedExtensions.
* release xmit buf lock on dtls13_MaybeSendKeyUpdate error paths.
* release 1stHandshakeLock on SSL_ResetHandshake error path.
* avoid null deref in mp_div_d sign normalization.
* Temp private key lifecycle is broken.
* protect rwSessionCount with slotLock.
* Remove invalid PORT_Free().
* Fix intermittent ClientGreaseKeyShare test failure.
* Fix kCtxStr len passed to tls_SignOrVerifyUpdate.
* patch upstream acvp-rust during checkout to avoid build failures.
* update acvp Dockerfile.
* CKA_PARAM_SET missing from the CK_ULONG list in softoken.
* CKA_SEED missing from isPrivate in the database.
* update abicheck expectation for __nss_InitLock.
* taskcluster: set NSS_DISABLE_LIBPKIX=1 in test env for static builds.
* tests: fix setup_policy to use ROOTCERTSFILE for root cert module path.
* tests: fix selfserv/httpserv PID handling and wait exit code for MSYS_NT.
* tests: add native_path helper for cross-platform path conversion.
* tstclnt, strsclnt: avoid DNS lookup for loopback addresses on Windows.
* avoid platform GCM for x64 iOS emulator builds.
* remove lock instrumentation feature.
* Move FIPS indicator structures out of fips_algorithms.h.
* all.sh is failing in FIPS SSL test in main tree.
* fix memory leaks in crmf tests.
* fix unsatisfiable condition in lg_getTrust.
* allow selfserv makefile build to use system zlib.
* Add allocation limit to pkcs12 decoding.
* Add text/html single-line example emails to NSS S/SMIME CMS tests.
- update to NSS 3.121
* update vendored zlib to v1.3.2.
* Revert the unnecessary changes to intel-gcm-wrap.gyp.
* Use C fallback for AES-GCM on MinGW builds.
* fix ML-KEM PCT.
* Extend NSS Fuzzing docs.
* avoid integer overflow in platform-independent ghash.
* Fix errant whitespace in OISTE Server Root RSA G1 nickname.
* add gcm.gyp dependency for Solaris SPARC builds.
* Set nssckbi version to 2.84.
* Add e-Szigno TLS Root CA 2023 to NSS.
* allow manual selection of CPU_ARCH=x86_64 and ppc64 in coreconf/Darwin.mk.
* Update cryptofuzz version.
* Paranoia assert.
* Darwin compatibility for intel-aes.S and intel-gcm.S.
* rename intel-{aes,gcm}.s to .S.
* rename C files for platform-specific ghash implementations.
* simplify compilation of platform-specific GCM and GHASH.
* FORWARD_NULL null deref of worker in p7decode.c (sec_pkcs7_decoder_abort_digests).
* Out-of-Bounds Read in ML-DSA Private Key Parsing (zero-length privateKey).
- update to NSS 3.120.1
* no upstream releasenotes
- update to NSS 3.120
* Fix docs generation bug.
* CID 1678226: Dereferencing null pointer plaintext.data().
* Run PKCS12 fuzz target with --fuzz=tls in CI.
* Allowing RT be started several times.
* move linux decision and build tasks to d2g worker pools.
- update to NSS 3.119.1
* restore coreconf/Darwin.mk behavior for intel archs
- update to NSS 3.119
* Fix ml-dsa return value for SECKEY_PrivateKeyStrengthInBits.
* Make sure we don't accept ECH if the HRR cookie is ill-formatted.
* Add a pkcs12 fuzzer with crypto stubbed out.
* handle errors while setting sanitizers cflags in build.
* Ignore IVs for AES KW.
* Update Cryptofuzz version.
* Fix incorrect logic for SNI selection when ECH is available but disabled.
* fix forwarding of sqlite_libs in sqlite.gyp.
* fix CPU_ARCH setting for arm64 makefile builds.
* remove unused calcThreads variable from cmd/rsaperf.
* Solving the incorrect tests introduced by extending EKU.
* Memory leaks in pkcs12 and pkcs7 decoders.
* Extending parsing with Microsoft Document Signing EKU.
* Extending parsing with Adobe Document Signing EKU.
* Extending pkix parsing with document signing EKUs.
* fix compilation failure on ia32.
* use hardware x64 GCM in static builds.
* separate ppc sha512 library from ppc gcm library.
* simplify cross-compilation from build.sh.
* use clang's integrated assembler.
* remove unused MP_IS_LITTLE_ENDIAN defines.
* fix logic for disabling altivec in gyp builds.
* free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
* Add TLS interoperability tests with openssl and gnutls.
* Ensure we don't send a DTLS1.3 cookie after DTLS1.2 HelloVerifyRequest.
* add failure checks to pk11_mergeTrust() .
* pk11wrap selects incorrect slot for CKM_ML_KEM*.
- Adjusted for changed naming scheme of tarballs for this release by upstream
- update to NSS 3.118.1
* pk11wrap selects incorrect slot for CKM_ML_KEM*
- update to NSS 3.118
* Remove four Commscope root certificates from NSS
* fix try pushes with --nspr-patch to actually apply the patch
* Support for NIST Curves compressed points
* Destroy certificate on error paths
* Move NSS DB password hash away from SHA-1
* support secp384r1mlkem1024
* vendor latest ML-KEM code from libcrux
* add mlk-kem-1024 tests
* use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test
* Move scripts to python3
* add mlkem1024 support in freebl
* support secp256r1mlkem768
* Make mlkem768x25519 the default
* ML-DSA SGN and VFY interfaces
* Align FIPS interfaces count with array
* Ensure CKK_ML_KEM has derive CK_FALSE
* Add script for tagging an NSS release
* Remove the globals from nss-release-helper.py
* Add release helper command for generating the release index
* Add release helper command for generating a release note
* Add release helper command for freezing a branch
- update to NSS 3.117
* fix memory leak in secasn1decode_unittest.cc
* Add OISTE roots
* Add runbook for certdata.txt changes
* dbtool: close databases before shutdown
* SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
* don’t flush base64 when buffer is null
* Set use_pkcs5_pbkd2_params2_only=1 for fuzzing builds
* mozilla::pkix: recognize the qcStatements extension for QWACs
* Fix a big-endian-problematic cast in zlib calls
* Revert removing out/ directory after ossfuzz build
* Add Cryptofuzz to OSS-Fuzz build
* Add PKCS#11 trust tests
* final disable dsa patch cert.sh
* ml-dsa: move tls 1.3 to use streaming signatures
* ml-dsa: Prep Create a FindOidTagByString function
* ml-dsa: softoken changes
* ml-dsa: der key decode
* ml-dsa: Prep colapse the overuse of keyType outside of pk11wrap and cryptohi
* ml-dsa: Prep Create a CreateSignatureAlgorithmID function
- update to NSS 3.116
* disable DSA in NSS script tests
* Disabling of some algorithms: generic cert.sh
* Need to update to new mechanisms
* Add ML-DSA public key printing support in NSS command-line utilities
* note embedded scts before revocation checks are performed
* Add support for ML-DSA keys and mechanisms in PKCS#11 interface
* Add support for ML-DSA key type and public key structure
* Enable ML-DSA integration via OIDs support and SECMOD flag
* disable kyber
* Implement PKCS #11 v3.2 PQ functions (use verify signature)
* Disable dsa - gtests
* make group and scheme support in test tools generic
* Create GH workflow to automatically close PRs
* Disable dsa - base code
* Disabling of some algorithms: remove dsa from pk11_mode
* Disable seed and RC2 bug fixes
* restore support for finding certificates by decoded serial number
* avoid CKR_BUFFER_TO_SMALL error in trust lookups
* lib/softtoken/{sdb.c,sftkdbti.h}: Align sftkdb_known_attributes_size type
* Use PKCS #11 v3.2 KEM mechanisms and functions
- update to NSS 3.115.1
* restore support for finding certificates by decoded serial number.
* avoid CKR_BUFFER_TO_SMALL error in trust lookups.
- update to NSS 3.115
* CID 1648399 - Resource leak in shlibsign.c
* CKA_SEED needs to be marked as a private attribute
* Fix bad syntax on Windows in softoken_gtest.cc
* Key private/public/secret keys by key type in softoken keydb
* add PK11_HPKE_GetSharedSecret to abi-check expected report
* remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain
* Fixup ABI
* add ECH_SECRET and ECH_CONFIG to SSLKEYLOG for both client and server
* ECH fuzz target
* Implement PKCS #11 v3.2 FIPS indicator and validation objects
* remove expired explicitly distrusted DigiNotar lookalike root
* Implement PKCS #11 v3.2 functions
- update to NSS 3.114
* NSS 3.114 source distribution should include NSPR 4.37
* Prevent leaks during pkcs12 decoding
* Remove redundant assert in p7local.c
* Bump nssckbi version to 2.80
* Remove expired Baltimore CyberTrust Root
* Add TrustAsia Dedicated Roots to NSS
* Add SwissSign 2022 Roots to NSS
* Add backwards compatibility for CK_PKCS5_PBKD2_PARAMS
* Implement PKCS #11 v3.2 trust objects in softoken
* Implement PKCS #11 v3.2 trust objects - nss proper
* remove dead code in ssl3con.c
* DTLS (excl DTLS1.3) Changing Holddown timer logic
* Bump nssckbi version to 2.79
* remove unneccessary assertion
* Update mechanisms for Softoken PCT
* convert Chunghwa Telecom ePKI Root removal to a distrust after
* Ensure ssl_HaveRecvBufLock and friends respect opt.noLocks
* use -O2 for asan build
* Fix leaking locks when toggling SSL_NO_LOCKS
* remove out-of-function semicolon
* Extend pkcs8 fuzz target
* Extend pkcs7 fuzz target
* Remove unused assignment to pageno
* Remove unused assignment to nextChunk
* don't run commands as part of shell `local` declarations
* fix sanitizer setup
* don't silence ssl_gtests output when running with coverage
* Release docs and housekeeping
* migrate to new linux tester pool
- update to NSS 3.113
* Fix alias for mac workers on try.
* Part 1: Use AES in the SDR (NSS) r=simonf,nss-reviewers,rrelyea
* Bump nssckbi version to 2.78.
* Turn off Websites Trust Bit for Chunghwa Telecom ePKI Root in FF 141.
* fix frame pointers in intel-gcm.s.
* Typo in release notes for NSS 101.4.
* Improve nss-release-helper.py.
* shlibsign is broken in System FIPS mode.
* Need up update NSS for PKCS 3.1: Move IPSEC to 3.1
* PKCS #11 v3.2 header files.
Changes in mozilla-nspr:
- update to NSPR 4.39
* Improved error handling in PR_CreateThread on Windows
* Cleanup and Type-cast fixes for prtime
* Remove unused prstreams C++ wrapper from NSPR
* Memory poisoning and Arena redzone fixes
* Removed emacs/vim modelines and .cvsignore files
* Added .editorconfig
- update to version 4.38.2
* Fixed a syntax error in test file parsetm.c, which was
introduced in 4.38.1
- update to version 4.38.1
* Incorrect time value produced by PR_ParseTimeString and
PR_ParseTimeStringToExplodedTime if input string doesn't
specify seconds.
- update to version 4.38
* Removed support for HPUX and _PR_POLL_WITH_SELECT
* Fixed a bug in pt_TCP_SendTo on macOS
* Ensure parameter passed to isalpha() is unsigned char
- update to version 4.37
* PR_GetUniqueIdentity asserts on the 32767th call
* error LNK2019: unresolved external symbol _InterlockedCompareExchange
* initclk deadline elapsed macOS
* Remove prwin.h (formerly known as prwin16.h)
* Use builtin atomic functions on RISC-V32/64
* PR_FormatTimeUSEnglish() doesn't support "%e" format specifier
Changes in rust-cbindgen:
- Update to version v0.29.4+git0:
* tests: Add some tests for constant enums.
* ir: Add support for arrays.
* ir: Allow constant literals with enum variants.
* ir: Use Path for ConstExprs.
* tests: Fix tests with modern gcc.
* Use C++ fixed-type enumeration syntax under C23 (or higher) as well
* Allow `pub` access to `ReprType` fields
- Update to version 0.29.2+git0:
* Check for CMSE ABI's as well
* Fix doc attribute parsing to properly handle block comments
* Expose the line_endings config option to use with the builder
* Explicitly request serde's std features to avoid issues with newer toml versions.
* enum: Track dependencies properly in enumerations.
- Update to version 0.29.2+git0:
* Explicitly request serde's std features to avoid issues with newer toml versions.
* Account for master -> main rename.
* Update changelog and bump version.
* enum: Track dependencies properly in enumerations.
* Allow must_use if a reason is specified
* constant: Handle cfg in associated constants.
* tests: Add a test for bitflags + disjoint cfg.
* Remove "display" feature from the toml crate
* DOC: Add metatensor
* Fix #1085 - Incorrect detection of duplicated constants
* chore: More clippy fixes.
* docs: Correct after_include type in example config
* cargo update
* cfg: Remove another clippy warning.
* Fix `clippy::uninlined_format_args`
* Update toml to 0.9
* Release 0.29.0
* Support no-export annotation for statics and functions.
* conditional fields of constexpr literal structs
* Add LiteralStructField
* Github action: Add aarch64 to deploy
* Add rename rule for generated associated constant
* Upgrade heck to 0.5
* Add support for an optional nullable attribute
* docs.md: Fix deprecated_with_note and deprecated_variant_with_note being spelled as 'notes'
* Fix generic with "void" default
* The return of Cast is simplified
* Added tests for as keyword inside array into structs
* Fixed error generation of structures using the keyword of as inside arrays
* Added test for unsafe(no_mangle) attribute
* Added tests for unsafe methotd's atributs
* Fixed handling of trait methods containing the unsafe attribute
* Rename -Zparse-only
* tests: Fix symbol file and tests.
* tests: Run rustfmt.
Patchnames: SUSE-SL-Micro-6.2-1570
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
8.3 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
8.8 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
7.8 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-16349
Threats
Impact
important
References
358 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues:\n\nChanges in MozillaFirefox:\n\nFirefox Extended Support Release 153.1.0 ESR.\n\n * Fixed: Various security fixes.\n\nMFSA 2026-77 (bsc#1274867):\n\n * CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL component\n * CVE-2026-74935 Privilege escalation in the DOM: Networking component\n * CVE-2026-74936 Use-after-free in the JavaScript: WebAssembly component\n * CVE-2026-74937 Use-after-free in the JavaScript: GC component\n * CVE-2026-74938 Mitigation bypass in the JavaScript: GC component\n * CVE-2026-74939 Privilege escalation in the DOM: Navigation component\n * CVE-2026-74940 Use-after-free in the Graphics: Text component\n * CVE-2026-74941 Privilege escalation in the Graphics: CanvasWebGL component\n * CVE-2026-74942 Privilege escalation in the Remote Settings Client component\n * CVE-2026-74943 Use-after-free in the Graphics: ImageLib component\n * CVE-2026-74944 Use-after-free in the DOM: Core \u0026 HTML component\n * CVE-2026-74945 Information disclosure in the Graphics: Text component\n * CVE-2026-74946 Privilege escalation due to incorrect boundary conditions in\n the Graphics: CanvasWebGL component\n * CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics\n component\n * CVE-2026-74948 Information disclosure in the Graphics component\n * CVE-2026-74949 Privilege escalation due to use-after-free in the Graphics:\n Canvas2D component\n * CVE-2026-74950 Privilege escalation in the Downloads API component\n * CVE-2026-74953 Privilege escalation in the Networking: Cookies component\n * CVE-2026-74954 Information disclosure due to side-channel in the Storage:\n Cache API component\n * CVE-2026-74955 Privilege escalation in the Request Handling component\n * CVE-2026-74956 Same-origin policy bypass in the DOM: Service Workers\n component\n * CVE-2026-74957 Mitigation bypass in the Safe Browsing component\n * CVE-2026-74958 Information disclosure in the WebRTC component\n * CVE-2026-74959 Mitigation bypass in the Storage: Cache API component\n * CVE-2026-74960 Site isolation issue in the WebExtensions component\n * CVE-2026-74961 Side-channel in the Web Audio component\n * CVE-2026-74962 Site isolation issue in the Networking: Cookies component\n * CVE-2026-74963 Same-origin policy bypass in the Networking: Cookies\n component\n * CVE-2026-74964 Integer overflow in the Graphics component\n * CVE-2026-74965 Privilege escalation in the Shell Integration component\n * CVE-2026-74966 Information disclosure in the Form Autofill component\n * CVE-2026-74967 Same-origin policy bypass in the Audio/Video: Playback\n component\n * CVE-2026-74968 Site isolation issue in the Graphics: WebRender component\n * CVE-2026-74969 Use-after-free in the Layout: Text and Fonts component\n * CVE-2026-74970 Site isolation issue in the Graphics component\n * CVE-2026-74971 Information disclosure in the DOM: UI Events \u0026 Focus Handling\n component\n * CVE-2026-74972 Information disclosure in the DOM: Push Subscriptions\n component\n * CVE-2026-74973 Race condition, use-after-free in the Graphics component\n * CVE-2026-74974 Same-origin policy bypass in the Graphics: ImageLib component\n * CVE-2026-74976 JIT miscompilation in the JavaScript Engine: JIT component\n * CVE-2026-74977 Integer overflow in the Graphics component\n * CVE-2026-74978 Clickjacking issue in the Widget component\n * CVE-2026-74979 Mitigation bypass in the Add-ons Manager component\n * CVE-2026-74981 Site isolation issue in the Audio/Video: Web Codecs component\n * CVE-2026-74982 Denial-of-service in the Widget component\n * CVE-2026-74983 Mitigation bypass in the Data Loss Prevention component\n * CVE-2026-74984 Race condition in the JavaScript Engine component\n * CVE-2026-74985 Privilege escalation in the Enterprise Policies component\n * CVE-2026-74986 Site isolation issue in the CSS Parsing and Computation\n component\n * CVE-2026-74987 Internally found bugs fixed in Firefox ESR 140.14, Firefox\n ESR 153.1 and Firefox 154\n * CVE-2026-74988 Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154\n * CVE-2026-74990 Internally found bugs fixed in Firefox ESR 115.39, Firefox\n ESR 140.14, Firefox ESR 153.1 and Firefox 154\n\nFirefox Extended Support Release 153.0esr ESR\n\n * New: ## General\n\n - Firefox now includes a new profile management system that\n helps you separate your online life into distinct profiles\n for work, school, vacation planning, or whatever you choose.\n Profiles can be customized with names, avatars, and color\n themes while keeping tabs, bookmarks, passwords, and browsing\n history separate. Built-in profile backup and restore also\n makes it easier to migrate to a new device or recover your\n browsing data.\n - Split View lets you view two webpages side-by-side in a\n single browser window, with additional options to quickly\n open links in Split View, rearrange pages, and search open\n tabs.\n - The Firefox address bar has gained several new\n capabilities, including built-in unit and time zone\n conversion, quick actions such as muting all browser audio,\n and direct search results as you type.\n - Firefox now supports copying links directly to highlighted\n text on a webpage for easier sharing.\n - Firefox Settings has been redesigned with improved\n organization and navigation, making it easier to find and\n customize browser preferences.\n\n * New: ## AI\n\n Firefox introduced several new AI-powered features, including\n on-device tab organization, AI-assisted link previews,\n integrated AI search, and centralized controls for managing\n AI features. Whenever possible, these features perform\n processing locally to help protect user privacy.\n\n * New: ## Sidebar and Tabs\n\n - Firefox continues to improve tab management with\n enhancements to vertical tabs, tab groups, and the sidebar.\n - Tab groups have gained numerous usability improvements,\n including better support for collapsed groups, previews of\n grouped tabs, and additional organization options.\n - Passwords can now be accessed directly from the Firefox\n sidebar without opening a separate tab.\n - Firefox now supports copying links from one or multiple\n background tabs directly from the tab context menu, and\n multiple tabs can be copied or shared in a single action.\n - A Send Tab toolbar button is now available through\n Customize Toolbar.\n\n * New: ## Security \u0026 Privacy\n\n - Firefox has significantly expanded Fingerprinting\n Protection, making it harder for websites to uniquely\n identify users in both Standard and Strict Enhanced Tracking\n Protection modes.\n - Enhanced Tracking Protection includes stronger protections\n against bounce tracking and additional safeguards that\n restrict websites from accessing local network resources\n without user permission.\n - Firefox now uses Safe Browsing V5 for phishing and malware\n protection.\n - Firefox Password Manager now uses stronger AES-256\n encryption to protect stored logins on disk.\n - Private Browsing has been enhanced with new controls,\n including the ability to instantly end a private browsing\n session and temporarily relax tracker blocking for individual\n sites when needed for compatibility.\n\n * New: ## Translations\n\n - Firefox has expanded on-device translation support with\n many additional languages and continued improvements to\n translation quality.\n\n - A dedicated translations page now provides an easy way to\n perform real-time translations directly within Firefox.\n\n * New: ## Accessibility\n\n - Firefox continues to improve accessibility with enhanced\n support for assistive technologies, including Windows UI\n Automation, improved keyboard navigation, more accessible\n date and time controls, and better support for mathematical\n content in PDFs.\n\n * New: ## Linux\n\n - Firefox now supports native fractional scaling on Wayland,\n improving rendering on high-DPI displays.\n - Firefox no longer requires a restart after package manager\n updates and uses less memory on Linux.\n - Firefox now supports the XDG Base Directory Specification\n and ships with RPM packages for Red Hat, Fedora, openSUSE,\n and other RPM-based distributions.\n\n * HTML5: - Firefox now supports the View Transitions API for\n creating smooth animated transitions between application\n views.\n\n - WebGPU support has expanded across supported platforms,\n including Windows and Apple Silicon Macs.\n - Added support for several modern web platform APIs,\n improving compatibility with modern web applications. Notable\n additions include the Navigation API, URLPattern, Trusted\n Types, Sanitizer API, and Prioritized Task Scheduling.\n\n * Enterprise: - Enterprise administrators can now centrally\n manage Firefox\u0027s Generative AI features through enterprise\n policy.\n - Fixed a performance regression affecting native messaging,\n improving responsiveness for enterprise extensions that\n communicate with external applications.\n - Enterprise policy documentation has moved to\n https://firefox-admin-docs.mozilla.org/.\n\n * Fixed: Various security fixes.\n\n- MFSA 2026-68 (bsc#1271649):\n\n * CVE-2026-16349\n Same-origin policy bypass in the DOM: Navigation component\n * CVE-2026-16350\n Incorrect boundary conditions in the Audio/Video: cubeb\n component\n * CVE-2026-16362\n Use-after-free in the WebRTC: Audio/Video component\n * CVE-2026-16351\n Sandbox escape due to use-after-free in the DOM: Navigation\n component\n * CVE-2026-16352\n Sandbox escape due to use-after-free in the Disability Access\n APIs component\n * CVE-2026-16363\n JIT miscompilation in the JavaScript: WebAssembly component\n * CVE-2026-16364\n Incorrect boundary conditions in the Audio/Video: Playback\n component\n * CVE-2026-16365\n Privilege escalation in the DOM: Workers component\n * CVE-2026-16366\n Privilege escalation in the DOM: Navigation component\n * CVE-2026-16353\n Invalid pointer in the DOM: Bindings (WebIDL) component\n * CVE-2026-16354\n Information disclosure in the Graphics: ImageLib component\n * CVE-2026-16367\n Sandbox escape due to invalid pointer in the Disability\n Access APIs component\n * CVE-2026-16368\n Incorrect boundary conditions in the JavaScript: WebAssembly\n component\n * CVE-2026-16369\n Integer overflow in the JavaScript: WebAssembly component\n * CVE-2026-16355\n JIT miscompilation in the JavaScript Engine: JIT component\n * CVE-2026-16356\n Sandbox escape due to use-after-free in the Disability Access\n APIs component\n * CVE-2026-16357\n Incorrect boundary conditions in the Graphics component\n * CVE-2026-16370\n Mitigation bypass in the DOM: Networking component\n * CVE-2026-16371\n Privilege escalation in the DOM: Navigation component\n * CVE-2026-16372\n Privilege escalation in the DOM: Content Processes component\n * CVE-2026-16373\n Information disclosure in the Privacy component in Firefox\n for Android\n * CVE-2026-16374\n Information disclosure in the Framework component in DevTools\n * CVE-2026-16375\n Site isolation issue in the Networking: HTTP component\n * CVE-2026-16376\n Denial-of-service in the Graphics: WebGPU component\n * CVE-2026-16377\n Mitigation bypass in the PDF Viewer component\n * CVE-2026-16378\n Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop\n component\n * CVE-2026-16379\n Privilege escalation in the DOM: Content Processes component\n * CVE-2026-16358\n Site isolation issue in the Graphics: WebRender component\n * CVE-2026-16380\n Mitigation bypass in the Networking component\n * CVE-2026-16381\n Same-origin policy bypass in the Networking: DNS component\n * CVE-2026-16382\n Mitigation bypass in the DOM: Service Workers component\n * CVE-2026-16383\n Mitigation bypass in the DOM: Networking component\n * CVE-2026-16384\n Information disclosure due to uninitialized memory in the\n Graphics: WebGPU component\n * CVE-2026-16385\n Information disclosure due to uninitialized memory in the\n Graphics: WebGPU component\n * CVE-2026-16386\n Information disclosure due to uninitialized memory in the\n Graphics: WebGPU component\n * CVE-2026-16387\n Site isolation issue in the Networking component\n * CVE-2026-16388\n Sandbox escape in the DOM: Networking component\n * CVE-2026-16389\n Incorrect boundary conditions, integer overflow in the\n Libraries component in NSS\n * CVE-2026-16390\n Mitigation bypass in the Enterprise Policies component\n * CVE-2026-16391\n Information disclosure in the Storage: IndexedDB component\n * CVE-2026-16392\n JIT miscompilation in the JavaScript Engine: JIT component\n * CVE-2026-16393\n Incorrect boundary conditions in the Graphics: WebGPU\n component\n * CVE-2026-16359\n Incorrect boundary conditions in the Audio/Video: GMP\n component\n * CVE-2026-16394\n Mitigation bypass in the DOM: Security component\n * CVE-2026-16395\n Integer overflow in the Audio/Video component\n * CVE-2026-16396\n Privilege escalation in WebExtensions\n * CVE-2026-16397\n Clickjacking issue in the WebExtensions component in Firefox\n for Android\n * CVE-2026-16398\n Site isolation issue in the Graphics component\n * CVE-2026-16399\n Site isolation issue in the DOM: Navigation component\n * CVE-2026-16400\n Information disclosure in the DOM: Security component\n * CVE-2026-16401\n Privilege escalation in the Data Loss Prevention component\n * CVE-2026-16402\n Integer overflow in the Graphics: ImageLib component\n * CVE-2026-16403\n Spoofing issue in the Address Bar component\n * CVE-2026-16404\n Spoofing issue in Firefox for Android\n * CVE-2026-16405\n Information disclosure in the Networking: WebSockets\n component\n * CVE-2026-16406\n Mitigation bypass in the Networking component\n * CVE-2026-16407\n Mitigation bypass in the DOM: Service Workers component\n * CVE-2026-16408\n Integer overflow in the Audio/Video: Playback component\n * CVE-2026-16409\n Invalid pointer in the Security: PSM component\n * CVE-2026-16410\n JIT miscompilation in the JavaScript Engine: JIT component\n * CVE-2026-16411 Memory safety bugs fixed in Firefox 153\n * CVE-2026-16412 Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153\n * CVE-2026-16360 Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153\n\nChanges in mozilla-nss:\n\n- Add patch to prefer any hybrid PQC and send at most one hybrid key share\n (bsc#1262698).\n- Add a notice to the module ID when it\u0027s in non-FIPS mode (bsc#1266263).\n- Import ML-DSA implementation and related PQC fixes from upstream (bsc#1262698, bsc#1272772).\n- Add power-on self-tests (KATs) for ML-KEM and ML-DSA (bsc#1272773).\n- Add zeroization for ML-KEM, ported from\n upstream (bsc#1272774).\n- Add zeroization for ML-DSA (bsc#1272774).\n- Add ML-DSA robustness and test fixes.\n\n- Add PQC algorithms to\n approved list. Increase approved symmetric keygen floor to 112\n bits (bsc#1262698). Approve non-NSS-aliased TLS 1.2 mechanisms\n (bsc#1266262).\n\nupdate to NSS 3.125\n\n * Set nssckbi version to 2.88.\n * Add Cybertrust Japan SecureSign Root CA16.\n * Remove Email Trust bit from TrustAsia Global Root CA G3 and G4.\n * Remove Entrust Root Certification Authority.\n * Remove SecureSign Root CA12.\n * Initialize ssl3.hs.echOuterExtensions in ssl_NewSocket.\n * replace references to nss-dev/nss with mozilla/nss.\n * limit recursion depth in CMS decoder.\n * clamp input.len to testString size in pk11_mergeSecretKey.\n * NULL pointer dereference in CERT_MergeExtensions.\n * CERT_DecodeAVAValue \u2014 Integer Overflow in Output Buffer Sizing.\n * fix two integer overflows on LLP64 systems.\n * Modify an assertion in ssl3_ClientSendAppProtoXtn.\n * Import RSA-PSS PKCS#8 private keys.\n * Update fuzz/config/tstclnt_arguments.py.\n * Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey.\n * Adding a guard against integer overflow in AESKeyWrap_EncryptKWP.\n * Add an integer overflow guard in UpdateBase64Decoder.\n * Void out the fd.release in reconfig tests.\n * make sftk_FindAttribute return a copy.\n * Converted nss parameter schema from voluptuous to msgspec.\n * drop slot monitor in PK11_ResetToken before calling PK11_InitToken.\n * adjust the code to use nspr from github.\n * avoid deadlock when PK11_IsLoggedIn is called from PK11_DoPassword.\n * test pk11auth.c functions with a non-threadsafe module.\n * PK11_InitPin sets slot-\u003elastLoginCheck without holding the slot monitor.\n * reject empty nickname in PK11_TraverseCertsForNicknameInSlot.\n * validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen.\n * guard space subtraction in ssl_CallCustomExtensionSenders.\n * rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow.\n * bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity.\n * Set tail pointer to null in static slot lists when deallocating.\n * avoid leaving a dangling ss-\u003esec.ci.sid on allocation failure.\n * guard against integer overflow in CERT_Hexify.\n * Reject empty SECItem inputs in sftk_IsSafePrime before indexing data[len-1].\n * NUL-terminate within filename field in jar_listtar to bound the filename scan.\n * Widen CERT_FormatName length accumulator from unsigned to size_t.\n * Bound IKE PRF nonce lengths to prevent CK_ULONG to unsigned int truncation.\n * Drop companion arrays on length mismatch in NSS_CMSArray_Sort instead of asserting.\n * Operate on a NUL-terminated copy in jar_parse_any to keep manifest scans bounded.\n * Reject MD2 contexts with unusedBuffer \u003e MD2_BUFSIZE in Update and End.\n * Reserve NUL terminator for CKA_NSS_URL in nssCKObject_GetAttributes.\n * Guard padding read against empty output in SEC_PKCS7DecryptContents.\n * Guard against keySize overflow in IKE PRF/PRF+ output sizing.\n * Allocate values array when overwriting an empty CMS attribute.\n * Validate CKA_TOKEN attribute size in nssCKFWObject_SetAttribute.\n * Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib.\n * Handle zero-length input in PrepareBitStringForEncoding.\n * Length-check raw_manifest before PORT_Strncasecmp prefix dispatch in JAR_parse_manifest.\n * Reject CKA_NSS_MODULE_SPEC values that aren\u2019t NUL-terminated within ulValueLen.\n * Reject negative PR_Read returns in JAR_digest_file and jar_create_pk7.\n * Update Bogo tests to 3fff7111b0eca817466e121059cb4e8b67ade35b.\n * doc: import NSS:TryServer wiki page in the tree.\n * improve PK11 URI tests.\n * avoid nested attributeLock acquisition in sftk_CopyObject.\n * doc: fix a typo in \u201cCommunity \u2014 Network Security Services (NSS)\u201d.\n * acquire RWLock before key copies in ssl_SetSelfEncryptKeyPair.\n * Reject empty nickname in PK11_TraverseCertsForNicknameInSlot.\n * require non-null session pointer in sftk_GetContext.\n * set session-\u003elastOpWasFIPS while holding session reference.\n * atomically claim object removal in sftk_DeleteObject.\n * atomically swap session search in NSC_FindObjects*.\n * atomically install session contexts in C_*Init.\n * hold session reference for context lifetime in C_*Update.\n * align softoken session lock with head-bucket hash.\n * restore reference counting for SFTKSession.\n\n- update to NSS 3.124\n * Add test for PKCS7 digest array alignment\n * Add test for rejection of excessively large ASN.1 SEQUENCE OF in quickder\n * Add test for CMS content size validation\n * Add regression tests for DSAU signature decoding\n * Add test for S/MIME profile lookup on temp certs\n * Test case for post-handshake auth and many certificate requests\n * Add test for intra-arena ASan redzones\n * update nss_status flags one at a time\n * add defensive info-\u003elen check in PK11_HPKE_SetupS and PK11_HPKE_SetupR\n * avoid PORT_Strdup in ssl_DecodeResumptionToken\n * add runtime check on decoded resumption token session id\n * improve mach try error handling\n * clang format\n * add comprehensive SECItem and SECItemArray tests\n * add bugzilla_cf_status_nss.py script\n * regenerate some recent release notes\n * fix bug list output by release note and email scripts\n * test removal from trust domain email cache\n * fix \"testing if key corruption is detected in attribute\" failures with sqlite-3.53.0\n * build sqlite3 shell for Windows CI runners\n * avoid race with module unloading in NSSTrustDomain_FindTokensByURI\n * add ImportEd25519WithNonEmptyAlgorithmParams test\n * add CLAUDE.md and .mcp.json\n * add a mach try command\n * remove dead condition in sec_asn1d_check_and_subtract_length\n * avoid integer truncation in nssCKObject_GetAttributes\n * add defensive input validation to sftk_compute_ANSI_X9_63_kdf\n * avoid refcount over-release in nssTokenObjectCache error path [@ nssToken_Destroy]\n * sdb: enforce that metaData\u0027s id key is unique when reading\n * improve handling of escape sequences in pk11uri_ParseAttributes\n * use correct data for ID comparison in transfer_uri_certs_to_collection\n * fix truncation of ulValueLen in sdb_FindObjectsInit\n * reject DTLS 1.3 Server Hello after HVR without capping ss-\u003evrange.max\n * set previous-nss-release for abicheck\n * Skip `PR_Sleep` yield for non-blocking sockets in `ssl3_SendApplicationData`\n * consistently protect PK11SlotInfo::maxKeyCount with freeListLock\n * Remove CRMF from testing and manifests\n * Remove unused RSA blind signature implementation from freebl\n\n- update to NSS 3.123.1\n * reject DTLS 1.3 Server Hello after HVR without capping ss-\u003evrange.max\n\n- update to NSS 3.123\n * https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/AW6VHkn6E0o\n\n- update to NSS 3.122.2:\n * reject DTLS 1.3 Server Hello after HVR without capping ss-\u003evrange.max\n\n- update to NSS 3.122.1\n * improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.\n * Improving the allocation of S/MIME DecryptSymKey.\n * store email on subject cache_entry in NSS trust domain.\n * Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.\n * Improve size calculations in CMS content buffering.\n * avoid integer overflow while escaping RFC822 Names.\n * Reject excessively large ASN.1 SEQUENCE OF in quickder.\n * Deep copy profile data in CERT_FindSMimeProfile.\n * Improve input validation in DSAU signature decoding.\n * avoid integer overflow in RSA_EMSAEncodePSS.\n * Add a maximum cert uncompressed len and tests.\n * Clarify extension negotiation mechanism for TLS Handshakes.\n * make ss-\u003essl3.hs.cookie an owned-copy of the cookie.\n\n- update to NSS 3.122\n * ensure permittedSubtrees don\u0027t match wildcards that could be outside the permitted tree.\n * run mach doc-lint from generate_release_doc.py.\n * Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.\n * tls13_CopyEchConfigs uses PR_LIST_TAIL instead of loop variable.\n * fix cipher spec count intermittent CI failures.\n * fix Mlkem768x25519ShareDamager intermittent CI failures.\n * lint the legacy documentation.\n * lint the NSS 3.112.3 release notes.\n * add a doc-lint CI job.\n * Add more useful coverage reports to CI and fail if new commit isn\u0027t tested.\n * wrong alert for malformed TLS 1.3 Finished.\n * Swap order of asserts and state check.\n * set correct value of unused curve parameters in tls13_HandleKeyShare.\n * GCM needs to check for various limits in FIPS mode.\n * Get Key Length not working from ED and Montgomery keys.\n * Not all ike modes are FIPS approved. Adjust the indicators when they aren\u0027t.\n * fix intermittent ssl.sh test failures on windows runners.\n * FIPS indicators on HKDF needs to be restricted to TLS usage.\n * Generate keys not getting indicators.\n * improve error handling in smime_init_once.\n * Detect CPU features on OpenBSD using elf_aux_info.\n * RSA_EMSAEncodePSS should validate the length of mHash.\n * more robustly distinguish SFTKSessionObject and SFTKTokenObjects.\n * fix missing .S file error in Solaris Makefile builds.\n * fix memory leak in NSC_GenerateKey error path.\n * Missing SECFailure return after FATAL_ERROR in tls13_HandleEncryptedExtensions.\n * release xmit buf lock on dtls13_MaybeSendKeyUpdate error paths.\n * release 1stHandshakeLock on SSL_ResetHandshake error path.\n * avoid null deref in mp_div_d sign normalization.\n * Temp private key lifecycle is broken.\n * protect rwSessionCount with slotLock.\n * Remove invalid PORT_Free().\n * Fix intermittent ClientGreaseKeyShare test failure.\n * Fix kCtxStr len passed to tls_SignOrVerifyUpdate.\n * patch upstream acvp-rust during checkout to avoid build failures.\n * update acvp Dockerfile.\n * CKA_PARAM_SET missing from the CK_ULONG list in softoken.\n * CKA_SEED missing from isPrivate in the database.\n * update abicheck expectation for __nss_InitLock.\n * taskcluster: set NSS_DISABLE_LIBPKIX=1 in test env for static builds.\n * tests: fix setup_policy to use ROOTCERTSFILE for root cert module path.\n * tests: fix selfserv/httpserv PID handling and wait exit code for MSYS_NT.\n * tests: add native_path helper for cross-platform path conversion.\n * tstclnt, strsclnt: avoid DNS lookup for loopback addresses on Windows.\n * avoid platform GCM for x64 iOS emulator builds.\n * remove lock instrumentation feature.\n * Move FIPS indicator structures out of fips_algorithms.h.\n * all.sh is failing in FIPS SSL test in main tree.\n * fix memory leaks in crmf tests.\n * fix unsatisfiable condition in lg_getTrust.\n * allow selfserv makefile build to use system zlib.\n * Add allocation limit to pkcs12 decoding.\n * Add text/html single-line example emails to NSS S/SMIME CMS tests.\n\n- update to NSS 3.121\n * update vendored zlib to v1.3.2.\n * Revert the unnecessary changes to intel-gcm-wrap.gyp.\n * Use C fallback for AES-GCM on MinGW builds.\n * fix ML-KEM PCT.\n * Extend NSS Fuzzing docs.\n * avoid integer overflow in platform-independent ghash.\n * Fix errant whitespace in OISTE Server Root RSA G1 nickname.\n * add gcm.gyp dependency for Solaris SPARC builds.\n * Set nssckbi version to 2.84.\n * Add e-Szigno TLS Root CA 2023 to NSS.\n * allow manual selection of CPU_ARCH=x86_64 and ppc64 in coreconf/Darwin.mk.\n * Update cryptofuzz version.\n * Paranoia assert.\n * Darwin compatibility for intel-aes.S and intel-gcm.S.\n * rename intel-{aes,gcm}.s to .S.\n * rename C files for platform-specific ghash implementations.\n * simplify compilation of platform-specific GCM and GHASH.\n * FORWARD_NULL null deref of worker in p7decode.c (sec_pkcs7_decoder_abort_digests).\n * Out-of-Bounds Read in ML-DSA Private Key Parsing (zero-length privateKey).\n\n- update to NSS 3.120.1\n\n * no upstream releasenotes\n\n- update to NSS 3.120\n * Fix docs generation bug.\n * CID 1678226: Dereferencing null pointer plaintext.data().\n * Run PKCS12 fuzz target with --fuzz=tls in CI.\n * Allowing RT be started several times.\n * move linux decision and build tasks to d2g worker pools.\n\n- update to NSS 3.119.1\n * restore coreconf/Darwin.mk behavior for intel archs\n\n- update to NSS 3.119\n * Fix ml-dsa return value for SECKEY_PrivateKeyStrengthInBits.\n * Make sure we don\u0027t accept ECH if the HRR cookie is ill-formatted.\n * Add a pkcs12 fuzzer with crypto stubbed out.\n * handle errors while setting sanitizers cflags in build.\n * Ignore IVs for AES KW.\n * Update Cryptofuzz version.\n * Fix incorrect logic for SNI selection when ECH is available but disabled.\n * fix forwarding of sqlite_libs in sqlite.gyp.\n * fix CPU_ARCH setting for arm64 makefile builds.\n * remove unused calcThreads variable from cmd/rsaperf.\n * Solving the incorrect tests introduced by extending EKU.\n * Memory leaks in pkcs12 and pkcs7 decoders.\n * Extending parsing with Microsoft Document Signing EKU.\n * Extending parsing with Adobe Document Signing EKU.\n * Extending pkix parsing with document signing EKUs.\n * fix compilation failure on ia32.\n * use hardware x64 GCM in static builds.\n * separate ppc sha512 library from ppc gcm library.\n * simplify cross-compilation from build.sh.\n * use clang\u0027s integrated assembler.\n * remove unused MP_IS_LITTLE_ENDIAN defines.\n * fix logic for disabling altivec in gyp builds.\n * free digest objects in SEC_PKCS7DecoderFinish if they haven\u0027t already been freed.\n * Add TLS interoperability tests with openssl and gnutls.\n * Ensure we don\u0027t send a DTLS1.3 cookie after DTLS1.2 HelloVerifyRequest.\n * add failure checks to pk11_mergeTrust() .\n * pk11wrap selects incorrect slot for CKM_ML_KEM*.\n\n- Adjusted for changed naming scheme of tarballs for this release by upstream\n\n- update to NSS 3.118.1\n * pk11wrap selects incorrect slot for CKM_ML_KEM*\n\n- update to NSS 3.118\n * Remove four Commscope root certificates from NSS\n * fix try pushes with --nspr-patch to actually apply the patch\n * Support for NIST Curves compressed points\n * Destroy certificate on error paths\n * Move NSS DB password hash away from SHA-1\n * support secp384r1mlkem1024\n * vendor latest ML-KEM code from libcrux\n * add mlk-kem-1024 tests\n * use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test\n * Move scripts to python3\n * add mlkem1024 support in freebl\n * support secp256r1mlkem768\n * Make mlkem768x25519 the default\n * ML-DSA SGN and VFY interfaces\n * Align FIPS interfaces count with array\n * Ensure CKK_ML_KEM has derive CK_FALSE\n * Add script for tagging an NSS release\n * Remove the globals from nss-release-helper.py\n * Add release helper command for generating the release index\n * Add release helper command for generating a release note\n * Add release helper command for freezing a branch\n\n- update to NSS 3.117\n * fix memory leak in secasn1decode_unittest.cc\n * Add OISTE roots\n * Add runbook for certdata.txt changes\n * dbtool: close databases before shutdown\n * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates\n * don\u2019t flush base64 when buffer is null\n * Set use_pkcs5_pbkd2_params2_only=1 for fuzzing builds\n * mozilla::pkix: recognize the qcStatements extension for QWACs\n * Fix a big-endian-problematic cast in zlib calls\n * Revert removing out/ directory after ossfuzz build\n * Add Cryptofuzz to OSS-Fuzz build\n * Add PKCS#11 trust tests\n * final disable dsa patch cert.sh\n * ml-dsa: move tls 1.3 to use streaming signatures\n * ml-dsa: Prep Create a FindOidTagByString function\n * ml-dsa: softoken changes\n * ml-dsa: der key decode\n * ml-dsa: Prep colapse the overuse of keyType outside of pk11wrap and cryptohi\n * ml-dsa: Prep Create a CreateSignatureAlgorithmID function\n\n- update to NSS 3.116\n * disable DSA in NSS script tests\n * Disabling of some algorithms: generic cert.sh\n * Need to update to new mechanisms\n * Add ML-DSA public key printing support in NSS command-line utilities\n * note embedded scts before revocation checks are performed\n * Add support for ML-DSA keys and mechanisms in PKCS#11 interface\n * Add support for ML-DSA key type and public key structure\n * Enable ML-DSA integration via OIDs support and SECMOD flag\n * disable kyber\n * Implement PKCS #11 v3.2 PQ functions (use verify signature)\n * Disable dsa - gtests\n * make group and scheme support in test tools generic\n * Create GH workflow to automatically close PRs\n * Disable dsa - base code\n * Disabling of some algorithms: remove dsa from pk11_mode\n * Disable seed and RC2 bug fixes\n * restore support for finding certificates by decoded serial number\n * avoid CKR_BUFFER_TO_SMALL error in trust lookups\n * lib/softtoken/{sdb.c,sftkdbti.h}: Align sftkdb_known_attributes_size type\n * Use PKCS #11 v3.2 KEM mechanisms and functions\n\n- update to NSS 3.115.1\n * restore support for finding certificates by decoded serial number.\n * avoid CKR_BUFFER_TO_SMALL error in trust lookups.\n\n- update to NSS 3.115\n * CID 1648399 - Resource leak in shlibsign.c\n * CKA_SEED needs to be marked as a private attribute\n * Fix bad syntax on Windows in softoken_gtest.cc\n * Key private/public/secret keys by key type in softoken keydb\n * add PK11_HPKE_GetSharedSecret to abi-check expected report\n * remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain\n * Fixup ABI\n * add ECH_SECRET and ECH_CONFIG to SSLKEYLOG for both client and server\n * ECH fuzz target\n * Implement PKCS #11 v3.2 FIPS indicator and validation objects\n * remove expired explicitly distrusted DigiNotar lookalike root\n * Implement PKCS #11 v3.2 functions\n\n- update to NSS 3.114\n * NSS 3.114 source distribution should include NSPR 4.37\n * Prevent leaks during pkcs12 decoding\n * Remove redundant assert in p7local.c\n * Bump nssckbi version to 2.80\n * Remove expired Baltimore CyberTrust Root\n * Add TrustAsia Dedicated Roots to NSS\n * Add SwissSign 2022 Roots to NSS\n * Add backwards compatibility for CK_PKCS5_PBKD2_PARAMS\n * Implement PKCS #11 v3.2 trust objects in softoken\n * Implement PKCS #11 v3.2 trust objects - nss proper\n * remove dead code in ssl3con.c\n * DTLS (excl DTLS1.3) Changing Holddown timer logic\n * Bump nssckbi version to 2.79\n * remove unneccessary assertion\n * Update mechanisms for Softoken PCT\n * convert Chunghwa Telecom ePKI Root removal to a distrust after\n * Ensure ssl_HaveRecvBufLock and friends respect opt.noLocks\n * use -O2 for asan build\n * Fix leaking locks when toggling SSL_NO_LOCKS\n * remove out-of-function semicolon\n * Extend pkcs8 fuzz target\n * Extend pkcs7 fuzz target\n * Remove unused assignment to pageno\n * Remove unused assignment to nextChunk\n * don\u0027t run commands as part of shell `local` declarations\n * fix sanitizer setup\n * don\u0027t silence ssl_gtests output when running with coverage\n * Release docs and housekeeping\n * migrate to new linux tester pool\n\n- update to NSS 3.113\n * Fix alias for mac workers on try.\n * Part 1: Use AES in the SDR (NSS) r=simonf,nss-reviewers,rrelyea\n * Bump nssckbi version to 2.78.\n * Turn off Websites Trust Bit for Chunghwa Telecom ePKI Root in FF 141.\n * fix frame pointers in intel-gcm.s.\n * Typo in release notes for NSS 101.4.\n * Improve nss-release-helper.py.\n * shlibsign is broken in System FIPS mode.\n * Need up update NSS for PKCS 3.1: Move IPSEC to 3.1\n * PKCS #11 v3.2 header files.\n\nChanges in mozilla-nspr:\n\n- update to NSPR 4.39\n\n * Improved error handling in PR_CreateThread on Windows\n * Cleanup and Type-cast fixes for prtime\n * Remove unused prstreams C++ wrapper from NSPR\n * Memory poisoning and Arena redzone fixes\n * Removed emacs/vim modelines and .cvsignore files\n * Added .editorconfig\n\n- update to version 4.38.2\n * Fixed a syntax error in test file parsetm.c, which was\n introduced in 4.38.1\n\n- update to version 4.38.1\n * Incorrect time value produced by PR_ParseTimeString and\n PR_ParseTimeStringToExplodedTime if input string doesn\u0027t\n specify seconds.\n\n- update to version 4.38\n * Removed support for HPUX and _PR_POLL_WITH_SELECT\n * Fixed a bug in pt_TCP_SendTo on macOS\n * Ensure parameter passed to isalpha() is unsigned char\n\n- update to version 4.37\n * PR_GetUniqueIdentity asserts on the 32767th call\n * error LNK2019: unresolved external symbol _InterlockedCompareExchange\n * initclk deadline elapsed macOS\n * Remove prwin.h (formerly known as prwin16.h)\n * Use builtin atomic functions on RISC-V32/64\n * PR_FormatTimeUSEnglish() doesn\u0027t support \"%e\" format specifier\n\nChanges in rust-cbindgen:\n\n- Update to version v0.29.4+git0:\n\n * tests: Add some tests for constant enums.\n * ir: Add support for arrays.\n * ir: Allow constant literals with enum variants.\n * ir: Use Path for ConstExprs.\n * tests: Fix tests with modern gcc.\n * Use C++ fixed-type enumeration syntax under C23 (or higher) as well\n * Allow `pub` access to `ReprType` fields\n\n- Update to version 0.29.2+git0:\n\n * Check for CMSE ABI\u0027s as well\n * Fix doc attribute parsing to properly handle block comments\n * Expose the line_endings config option to use with the builder\n * Explicitly request serde\u0027s std features to avoid issues with newer toml versions.\n * enum: Track dependencies properly in enumerations.\n\n- Update to version 0.29.2+git0:\n * Explicitly request serde\u0027s std features to avoid issues with newer toml versions.\n * Account for master -\u003e main rename.\n * Update changelog and bump version.\n * enum: Track dependencies properly in enumerations.\n * Allow must_use if a reason is specified\n * constant: Handle cfg in associated constants.\n * tests: Add a test for bitflags + disjoint cfg.\n * Remove \"display\" feature from the toml crate\n * DOC: Add metatensor\n * Fix #1085 - Incorrect detection of duplicated constants\n * chore: More clippy fixes.\n * docs: Correct after_include type in example config\n * cargo update\n * cfg: Remove another clippy warning.\n * Fix `clippy::uninlined_format_args`\n * Update toml to 0.9\n * Release 0.29.0\n * Support no-export annotation for statics and functions.\n * conditional fields of constexpr literal structs\n * Add LiteralStructField\n * Github action: Add aarch64 to deploy\n * Add rename rule for generated associated constant\n * Upgrade heck to 0.5\n * Add support for an optional nullable attribute\n * docs.md: Fix deprecated_with_note and deprecated_variant_with_note being spelled as \u0027notes\u0027\n * Fix generic with \"void\" default\n * The return of Cast is simplified\n * Added tests for as keyword inside array into structs\n * Fixed error generation of structures using the keyword of as inside arrays\n * Added test for unsafe(no_mangle) attribute\n * Added tests for unsafe methotd\u0027s atributs\n * Fixed handling of trait methods containing the unsafe attribute\n * Rename -Zparse-only\n * tests: Fix symbol file and tests.\n * tests: Run rustfmt.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SL-Micro-6.2-1570",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23411-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:23411-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623411-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:23411-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-September/049825.html"
},
{
"category": "self",
"summary": "SUSE Bug 1262698",
"url": "https://bugzilla.suse.com/1262698"
},
{
"category": "self",
"summary": "SUSE Bug 1262701",
"url": "https://bugzilla.suse.com/1262701"
},
{
"category": "self",
"summary": "SUSE Bug 1266262",
"url": "https://bugzilla.suse.com/1266262"
},
{
"category": "self",
"summary": "SUSE Bug 1266263",
"url": "https://bugzilla.suse.com/1266263"
},
{
"category": "self",
"summary": "SUSE Bug 1271649",
"url": "https://bugzilla.suse.com/1271649"
},
{
"category": "self",
"summary": "SUSE Bug 1272772",
"url": "https://bugzilla.suse.com/1272772"
},
{
"category": "self",
"summary": "SUSE Bug 1272773",
"url": "https://bugzilla.suse.com/1272773"
},
{
"category": "self",
"summary": "SUSE Bug 1272774",
"url": "https://bugzilla.suse.com/1272774"
},
{
"category": "self",
"summary": "SUSE Bug 1274867",
"url": "https://bugzilla.suse.com/1274867"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16349 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16350 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16350/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16351 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16351/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16352 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16353 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16354 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16355 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16356 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16357 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16358 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16358/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16359 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16359/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16360 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16362 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16362/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16363 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16363/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16364 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16364/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16365 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16365/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16366 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16367 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16367/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16368 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16368/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16369 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16370 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16370/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16371 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16371/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16372 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16373 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16373/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16374 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16374/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16375 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16375/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16376 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16376/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16377 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16377/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16378 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16378/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16379 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16379/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16380 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16380/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16381 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16381/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16382 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16384 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16384/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16385 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16386 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16387 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16389 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16390 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16391 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16392 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16393 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16393/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16394 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16394/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16395 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16395/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16396 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16396/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16397 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16398 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16399 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16400 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16401 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16401/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16402 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16403 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16404 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16404/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16405 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16406 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16407 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16407/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16408 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16409 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16410 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16411 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16412 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74936 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74938 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74939 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74939/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74941 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74942 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74943 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74944 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74945 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74946 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74949 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74953 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74954 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74955 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74956 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74957 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74958 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74959 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74960 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74961 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74962 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74963 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74964 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74965 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74966 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74967 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74969 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74970 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74971 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74973 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74974 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74976 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74977 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74978 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74979 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74983 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74985 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74987 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74987/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74988 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74990 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74990/"
}
],
"title": "Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen",
"tracking": {
"current_release_date": "2026-09-16T20:15:39Z",
"generator": {
"date": "2026-08-31T16:16:32Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:23411-1",
"initial_release_date": "2026-08-31T16:16:32Z",
"revision_history": [
{
"date": "2026-08-31T16:16:32Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-08-31T16:16:32Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T19:28:24Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:15:39Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.125-160000.1.1.aarch64",
"product": {
"name": "libfreebl3-3.125-160000.1.1.aarch64",
"product_id": "libfreebl3-3.125-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreebl3@3.125-160000.1.1?arch=aarch64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.125-160000.1.1.aarch64",
"product": {
"name": "libsoftokn3-3.125-160000.1.1.aarch64",
"product_id": "libsoftokn3-3.125-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libsoftokn3@3.125-160000.1.1?arch=aarch64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.39-160000.1.1.aarch64",
"product": {
"name": "mozilla-nspr-4.39-160000.1.1.aarch64",
"product_id": "mozilla-nspr-4.39-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:netscape_portable_runtime:4.39:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nspr@4.39-160000.1.1?arch=aarch64\u0026upstream=mozilla-nspr-4.39-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.125-160000.1.1.aarch64",
"product": {
"name": "mozilla-nss-3.125-160000.1.1.aarch64",
"product_id": "mozilla-nss-3.125-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss@3.125-160000.1.1?arch=aarch64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.125-160000.1.1.aarch64",
"product": {
"name": "mozilla-nss-certs-3.125-160000.1.1.aarch64",
"product_id": "mozilla-nss-certs-3.125-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-certs@3.125-160000.1.1?arch=aarch64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.125-160000.1.1.aarch64",
"product": {
"name": "mozilla-nss-tools-3.125-160000.1.1.aarch64",
"product_id": "mozilla-nss-tools-3.125-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-tools@3.125-160000.1.1?arch=aarch64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.125-160000.1.1.ppc64le",
"product": {
"name": "libfreebl3-3.125-160000.1.1.ppc64le",
"product_id": "libfreebl3-3.125-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreebl3@3.125-160000.1.1?arch=ppc64le\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.125-160000.1.1.ppc64le",
"product": {
"name": "libsoftokn3-3.125-160000.1.1.ppc64le",
"product_id": "libsoftokn3-3.125-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libsoftokn3@3.125-160000.1.1?arch=ppc64le\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.39-160000.1.1.ppc64le",
"product": {
"name": "mozilla-nspr-4.39-160000.1.1.ppc64le",
"product_id": "mozilla-nspr-4.39-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:netscape_portable_runtime:4.39:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nspr@4.39-160000.1.1?arch=ppc64le\u0026upstream=mozilla-nspr-4.39-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.125-160000.1.1.ppc64le",
"product": {
"name": "mozilla-nss-3.125-160000.1.1.ppc64le",
"product_id": "mozilla-nss-3.125-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss@3.125-160000.1.1?arch=ppc64le\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"product": {
"name": "mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"product_id": "mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-certs@3.125-160000.1.1?arch=ppc64le\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"product": {
"name": "mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"product_id": "mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-tools@3.125-160000.1.1?arch=ppc64le\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.125-160000.1.1.s390x",
"product": {
"name": "libfreebl3-3.125-160000.1.1.s390x",
"product_id": "libfreebl3-3.125-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreebl3@3.125-160000.1.1?arch=s390x\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.125-160000.1.1.s390x",
"product": {
"name": "libsoftokn3-3.125-160000.1.1.s390x",
"product_id": "libsoftokn3-3.125-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libsoftokn3@3.125-160000.1.1?arch=s390x\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.39-160000.1.1.s390x",
"product": {
"name": "mozilla-nspr-4.39-160000.1.1.s390x",
"product_id": "mozilla-nspr-4.39-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:netscape_portable_runtime:4.39:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nspr@4.39-160000.1.1?arch=s390x\u0026upstream=mozilla-nspr-4.39-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.125-160000.1.1.s390x",
"product": {
"name": "mozilla-nss-3.125-160000.1.1.s390x",
"product_id": "mozilla-nss-3.125-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss@3.125-160000.1.1?arch=s390x\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.125-160000.1.1.s390x",
"product": {
"name": "mozilla-nss-certs-3.125-160000.1.1.s390x",
"product_id": "mozilla-nss-certs-3.125-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-certs@3.125-160000.1.1?arch=s390x\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.125-160000.1.1.s390x",
"product": {
"name": "mozilla-nss-tools-3.125-160000.1.1.s390x",
"product_id": "mozilla-nss-tools-3.125-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-tools@3.125-160000.1.1?arch=s390x\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libfreebl3-3.125-160000.1.1.x86_64",
"product": {
"name": "libfreebl3-3.125-160000.1.1.x86_64",
"product_id": "libfreebl3-3.125-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libfreebl3@3.125-160000.1.1?arch=x86_64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsoftokn3-3.125-160000.1.1.x86_64",
"product": {
"name": "libsoftokn3-3.125-160000.1.1.x86_64",
"product_id": "libsoftokn3-3.125-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libsoftokn3@3.125-160000.1.1?arch=x86_64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nspr-4.39-160000.1.1.x86_64",
"product": {
"name": "mozilla-nspr-4.39-160000.1.1.x86_64",
"product_id": "mozilla-nspr-4.39-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:netscape_portable_runtime:4.39:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nspr@4.39-160000.1.1?arch=x86_64\u0026upstream=mozilla-nspr-4.39-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-3.125-160000.1.1.x86_64",
"product": {
"name": "mozilla-nss-3.125-160000.1.1.x86_64",
"product_id": "mozilla-nss-3.125-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss@3.125-160000.1.1?arch=x86_64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-certs-3.125-160000.1.1.x86_64",
"product": {
"name": "mozilla-nss-certs-3.125-160000.1.1.x86_64",
"product_id": "mozilla-nss-certs-3.125-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-certs@3.125-160000.1.1?arch=x86_64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mozilla-nss-tools-3.125-160000.1.1.x86_64",
"product": {
"name": "mozilla-nss-tools-3.125-160000.1.1.x86_64",
"product_id": "mozilla-nss-tools-3.125-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:nss:3.125:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/mozilla-nss-tools@3.125-160000.1.1?arch=x86_64\u0026upstream=mozilla-nss-3.125-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.2",
"product": {
"name": "SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.125-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64"
},
"product_reference": "libfreebl3-3.125-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.125-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le"
},
"product_reference": "libfreebl3-3.125-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.125-160000.1.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x"
},
"product_reference": "libfreebl3-3.125-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libfreebl3-3.125-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64"
},
"product_reference": "libfreebl3-3.125-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.125-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64"
},
"product_reference": "libsoftokn3-3.125-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.125-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le"
},
"product_reference": "libsoftokn3-3.125-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.125-160000.1.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x"
},
"product_reference": "libsoftokn3-3.125-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsoftokn3-3.125-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64"
},
"product_reference": "libsoftokn3-3.125-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.39-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64"
},
"product_reference": "mozilla-nspr-4.39-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.39-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le"
},
"product_reference": "mozilla-nspr-4.39-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.39-160000.1.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x"
},
"product_reference": "mozilla-nspr-4.39-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nspr-4.39-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64"
},
"product_reference": "mozilla-nspr-4.39-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.125-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64"
},
"product_reference": "mozilla-nss-3.125-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.125-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le"
},
"product_reference": "mozilla-nss-3.125-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.125-160000.1.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x"
},
"product_reference": "mozilla-nss-3.125-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-3.125-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64"
},
"product_reference": "mozilla-nss-3.125-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.125-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64"
},
"product_reference": "mozilla-nss-certs-3.125-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.125-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le"
},
"product_reference": "mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.125-160000.1.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x"
},
"product_reference": "mozilla-nss-certs-3.125-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-certs-3.125-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64"
},
"product_reference": "mozilla-nss-certs-3.125-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.125-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64"
},
"product_reference": "mozilla-nss-tools-3.125-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.125-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le"
},
"product_reference": "mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.125-160000.1.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x"
},
"product_reference": "mozilla-nss-tools-3.125-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mozilla-nss-tools-3.125-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
},
"product_reference": "mozilla-nss-tools-3.125-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-16349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16349"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16349",
"url": "https://www.suse.com/security/cve/CVE-2026-16349"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16349",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16349"
},
{
"cve": "CVE-2026-16350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16350"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16350",
"url": "https://www.suse.com/security/cve/CVE-2026-16350"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16350",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16350"
},
{
"cve": "CVE-2026-16351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16351"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16351",
"url": "https://www.suse.com/security/cve/CVE-2026-16351"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16351",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16351"
},
{
"cve": "CVE-2026-16352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16352"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16352",
"url": "https://www.suse.com/security/cve/CVE-2026-16352"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16352",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16352"
},
{
"cve": "CVE-2026-16353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16353"
}
],
"notes": [
{
"category": "general",
"text": "Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16353",
"url": "https://www.suse.com/security/cve/CVE-2026-16353"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16353",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16353"
},
{
"cve": "CVE-2026-16354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16354"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16354",
"url": "https://www.suse.com/security/cve/CVE-2026-16354"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16354",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16354"
},
{
"cve": "CVE-2026-16355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16355"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16355",
"url": "https://www.suse.com/security/cve/CVE-2026-16355"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16355",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16355"
},
{
"cve": "CVE-2026-16356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16356"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16356",
"url": "https://www.suse.com/security/cve/CVE-2026-16356"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16356",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16356"
},
{
"cve": "CVE-2026-16357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16357"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16357",
"url": "https://www.suse.com/security/cve/CVE-2026-16357"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16357",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16357"
},
{
"cve": "CVE-2026-16358",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16358"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16358",
"url": "https://www.suse.com/security/cve/CVE-2026-16358"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16358",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16358"
},
{
"cve": "CVE-2026-16359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16359"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16359",
"url": "https://www.suse.com/security/cve/CVE-2026-16359"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16359",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16359"
},
{
"cve": "CVE-2026-16360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16360"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16360",
"url": "https://www.suse.com/security/cve/CVE-2026-16360"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16360",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16360"
},
{
"cve": "CVE-2026-16362",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16362"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16362",
"url": "https://www.suse.com/security/cve/CVE-2026-16362"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16362",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16362"
},
{
"cve": "CVE-2026-16363",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16363"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16363",
"url": "https://www.suse.com/security/cve/CVE-2026-16363"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16363",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16363"
},
{
"cve": "CVE-2026-16364",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16364"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16364",
"url": "https://www.suse.com/security/cve/CVE-2026-16364"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16364",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16364"
},
{
"cve": "CVE-2026-16365",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16365"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16365",
"url": "https://www.suse.com/security/cve/CVE-2026-16365"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16365",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16365"
},
{
"cve": "CVE-2026-16366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16366"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16366",
"url": "https://www.suse.com/security/cve/CVE-2026-16366"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16366",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16366"
},
{
"cve": "CVE-2026-16367",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16367"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16367",
"url": "https://www.suse.com/security/cve/CVE-2026-16367"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16367",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16367"
},
{
"cve": "CVE-2026-16368",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16368"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16368",
"url": "https://www.suse.com/security/cve/CVE-2026-16368"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16368",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16368"
},
{
"cve": "CVE-2026-16369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16369"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16369",
"url": "https://www.suse.com/security/cve/CVE-2026-16369"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16369",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16369"
},
{
"cve": "CVE-2026-16370",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16370"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16370",
"url": "https://www.suse.com/security/cve/CVE-2026-16370"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16370",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16370"
},
{
"cve": "CVE-2026-16371",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16371"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16371",
"url": "https://www.suse.com/security/cve/CVE-2026-16371"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16371",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16371"
},
{
"cve": "CVE-2026-16372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16372"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16372",
"url": "https://www.suse.com/security/cve/CVE-2026-16372"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16372",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16372"
},
{
"cve": "CVE-2026-16373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16373"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16373",
"url": "https://www.suse.com/security/cve/CVE-2026-16373"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16373",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16373"
},
{
"cve": "CVE-2026-16374",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16374"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16374",
"url": "https://www.suse.com/security/cve/CVE-2026-16374"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16374",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16374"
},
{
"cve": "CVE-2026-16375",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16375"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16375",
"url": "https://www.suse.com/security/cve/CVE-2026-16375"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16375",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16375"
},
{
"cve": "CVE-2026-16376",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16376"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16376",
"url": "https://www.suse.com/security/cve/CVE-2026-16376"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16376",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16376"
},
{
"cve": "CVE-2026-16377",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16377"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16377",
"url": "https://www.suse.com/security/cve/CVE-2026-16377"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16377",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16377"
},
{
"cve": "CVE-2026-16378",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16378"
}
],
"notes": [
{
"category": "general",
"text": "Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16378",
"url": "https://www.suse.com/security/cve/CVE-2026-16378"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16378",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16378"
},
{
"cve": "CVE-2026-16379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16379"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16379",
"url": "https://www.suse.com/security/cve/CVE-2026-16379"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16379",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16379"
},
{
"cve": "CVE-2026-16380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16380"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16380",
"url": "https://www.suse.com/security/cve/CVE-2026-16380"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16380",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16380"
},
{
"cve": "CVE-2026-16381",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16381"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16381",
"url": "https://www.suse.com/security/cve/CVE-2026-16381"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16381",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16381"
},
{
"cve": "CVE-2026-16382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16382"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16382",
"url": "https://www.suse.com/security/cve/CVE-2026-16382"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16382",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16382"
},
{
"cve": "CVE-2026-16383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16383"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16383",
"url": "https://www.suse.com/security/cve/CVE-2026-16383"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16383",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16383"
},
{
"cve": "CVE-2026-16384",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16384"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16384",
"url": "https://www.suse.com/security/cve/CVE-2026-16384"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16384",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16384"
},
{
"cve": "CVE-2026-16385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16385"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16385",
"url": "https://www.suse.com/security/cve/CVE-2026-16385"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16385",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16385"
},
{
"cve": "CVE-2026-16386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16386"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16386",
"url": "https://www.suse.com/security/cve/CVE-2026-16386"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16386",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16386"
},
{
"cve": "CVE-2026-16387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16387"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16387",
"url": "https://www.suse.com/security/cve/CVE-2026-16387"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16387",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16387"
},
{
"cve": "CVE-2026-16388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16388"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16388",
"url": "https://www.suse.com/security/cve/CVE-2026-16388"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16388",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16388"
},
{
"cve": "CVE-2026-16389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16389"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16389",
"url": "https://www.suse.com/security/cve/CVE-2026-16389"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16389",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16389"
},
{
"cve": "CVE-2026-16390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16390"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16390",
"url": "https://www.suse.com/security/cve/CVE-2026-16390"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16390",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16390"
},
{
"cve": "CVE-2026-16391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16391"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16391",
"url": "https://www.suse.com/security/cve/CVE-2026-16391"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16391",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16391"
},
{
"cve": "CVE-2026-16392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16392"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16392",
"url": "https://www.suse.com/security/cve/CVE-2026-16392"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16392",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16392"
},
{
"cve": "CVE-2026-16393",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16393"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16393",
"url": "https://www.suse.com/security/cve/CVE-2026-16393"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16393",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16393"
},
{
"cve": "CVE-2026-16394",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16394"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16394",
"url": "https://www.suse.com/security/cve/CVE-2026-16394"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16394",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16394"
},
{
"cve": "CVE-2026-16395",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16395"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16395",
"url": "https://www.suse.com/security/cve/CVE-2026-16395"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16395",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16395"
},
{
"cve": "CVE-2026-16396",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16396"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16396",
"url": "https://www.suse.com/security/cve/CVE-2026-16396"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16396",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16396"
},
{
"cve": "CVE-2026-16397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16397"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16397",
"url": "https://www.suse.com/security/cve/CVE-2026-16397"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16397",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16397"
},
{
"cve": "CVE-2026-16398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16398"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16398",
"url": "https://www.suse.com/security/cve/CVE-2026-16398"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16398",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16398"
},
{
"cve": "CVE-2026-16399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16399"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16399",
"url": "https://www.suse.com/security/cve/CVE-2026-16399"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16399",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16399"
},
{
"cve": "CVE-2026-16400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16400"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16400",
"url": "https://www.suse.com/security/cve/CVE-2026-16400"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16400",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16400"
},
{
"cve": "CVE-2026-16401",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16401"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16401",
"url": "https://www.suse.com/security/cve/CVE-2026-16401"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16401",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16401"
},
{
"cve": "CVE-2026-16402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16402"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16402",
"url": "https://www.suse.com/security/cve/CVE-2026-16402"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16402",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16402"
},
{
"cve": "CVE-2026-16403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16403"
}
],
"notes": [
{
"category": "general",
"text": "Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16403",
"url": "https://www.suse.com/security/cve/CVE-2026-16403"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16403",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16403"
},
{
"cve": "CVE-2026-16404",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16404"
}
],
"notes": [
{
"category": "general",
"text": "Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16404",
"url": "https://www.suse.com/security/cve/CVE-2026-16404"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16404",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16404"
},
{
"cve": "CVE-2026-16405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16405"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16405",
"url": "https://www.suse.com/security/cve/CVE-2026-16405"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16405",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16405"
},
{
"cve": "CVE-2026-16406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16406"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16406",
"url": "https://www.suse.com/security/cve/CVE-2026-16406"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16406",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16406"
},
{
"cve": "CVE-2026-16407",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16407"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16407",
"url": "https://www.suse.com/security/cve/CVE-2026-16407"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16407",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16407"
},
{
"cve": "CVE-2026-16408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16408"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16408",
"url": "https://www.suse.com/security/cve/CVE-2026-16408"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16408",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16408"
},
{
"cve": "CVE-2026-16409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16409"
}
],
"notes": [
{
"category": "general",
"text": "Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16409",
"url": "https://www.suse.com/security/cve/CVE-2026-16409"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16409",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16409"
},
{
"cve": "CVE-2026-16410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16410"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16410",
"url": "https://www.suse.com/security/cve/CVE-2026-16410"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16410",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16410"
},
{
"cve": "CVE-2026-16411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16411"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153 and Thunderbird 153.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16411",
"url": "https://www.suse.com/security/cve/CVE-2026-16411"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16411",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16411"
},
{
"cve": "CVE-2026-16412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16412"
}
],
"notes": [
{
"category": "general",
"text": "Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16412",
"url": "https://www.suse.com/security/cve/CVE-2026-16412"
},
{
"category": "external",
"summary": "SUSE Bug 1271649 for CVE-2026-16412",
"url": "https://bugzilla.suse.com/1271649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-16412"
},
{
"cve": "CVE-2026-74934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74934"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74934",
"url": "https://www.suse.com/security/cve/CVE-2026-74934"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74934",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74934"
},
{
"cve": "CVE-2026-74935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74935"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74935",
"url": "https://www.suse.com/security/cve/CVE-2026-74935"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74935",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74935"
},
{
"cve": "CVE-2026-74936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74936"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74936",
"url": "https://www.suse.com/security/cve/CVE-2026-74936"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74936",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74936"
},
{
"cve": "CVE-2026-74937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74937"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74937",
"url": "https://www.suse.com/security/cve/CVE-2026-74937"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74937",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74937"
},
{
"cve": "CVE-2026-74938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74938"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74938",
"url": "https://www.suse.com/security/cve/CVE-2026-74938"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74938",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74938"
},
{
"cve": "CVE-2026-74939",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74939"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74939",
"url": "https://www.suse.com/security/cve/CVE-2026-74939"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74939",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74939"
},
{
"cve": "CVE-2026-74940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74940"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74940",
"url": "https://www.suse.com/security/cve/CVE-2026-74940"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74940",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74940"
},
{
"cve": "CVE-2026-74941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74941"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74941",
"url": "https://www.suse.com/security/cve/CVE-2026-74941"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74941",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74941"
},
{
"cve": "CVE-2026-74942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74942"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74942",
"url": "https://www.suse.com/security/cve/CVE-2026-74942"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74942",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74942"
},
{
"cve": "CVE-2026-74943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74943"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74943",
"url": "https://www.suse.com/security/cve/CVE-2026-74943"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74943",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74943"
},
{
"cve": "CVE-2026-74944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74944"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74944",
"url": "https://www.suse.com/security/cve/CVE-2026-74944"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74944",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74944"
},
{
"cve": "CVE-2026-74945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74945"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74945",
"url": "https://www.suse.com/security/cve/CVE-2026-74945"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74945",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74945"
},
{
"cve": "CVE-2026-74946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74946"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74946",
"url": "https://www.suse.com/security/cve/CVE-2026-74946"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74946",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74946"
},
{
"cve": "CVE-2026-74947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74947"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74947",
"url": "https://www.suse.com/security/cve/CVE-2026-74947"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74947",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74947"
},
{
"cve": "CVE-2026-74948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74948"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74948",
"url": "https://www.suse.com/security/cve/CVE-2026-74948"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74948",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74948"
},
{
"cve": "CVE-2026-74949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74949"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74949",
"url": "https://www.suse.com/security/cve/CVE-2026-74949"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74949",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74949"
},
{
"cve": "CVE-2026-74950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74950"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74950",
"url": "https://www.suse.com/security/cve/CVE-2026-74950"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74950",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74950"
},
{
"cve": "CVE-2026-74953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74953"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74953",
"url": "https://www.suse.com/security/cve/CVE-2026-74953"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74953",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74953"
},
{
"cve": "CVE-2026-74954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74954"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74954",
"url": "https://www.suse.com/security/cve/CVE-2026-74954"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74954",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74954"
},
{
"cve": "CVE-2026-74955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74955"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74955",
"url": "https://www.suse.com/security/cve/CVE-2026-74955"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74955",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74955"
},
{
"cve": "CVE-2026-74956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74956"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74956",
"url": "https://www.suse.com/security/cve/CVE-2026-74956"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74956",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74956"
},
{
"cve": "CVE-2026-74957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74957"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74957",
"url": "https://www.suse.com/security/cve/CVE-2026-74957"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74957",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74957"
},
{
"cve": "CVE-2026-74958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74958"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74958",
"url": "https://www.suse.com/security/cve/CVE-2026-74958"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74958",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74958"
},
{
"cve": "CVE-2026-74959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74959"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74959",
"url": "https://www.suse.com/security/cve/CVE-2026-74959"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74959",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74959"
},
{
"cve": "CVE-2026-74960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74960"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74960",
"url": "https://www.suse.com/security/cve/CVE-2026-74960"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74960",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74960"
},
{
"cve": "CVE-2026-74961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74961"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74961",
"url": "https://www.suse.com/security/cve/CVE-2026-74961"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74961",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74961"
},
{
"cve": "CVE-2026-74962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74962"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74962",
"url": "https://www.suse.com/security/cve/CVE-2026-74962"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74962",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74962"
},
{
"cve": "CVE-2026-74963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74963"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74963",
"url": "https://www.suse.com/security/cve/CVE-2026-74963"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74963",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74963"
},
{
"cve": "CVE-2026-74964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74964"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74964",
"url": "https://www.suse.com/security/cve/CVE-2026-74964"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74964",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74964"
},
{
"cve": "CVE-2026-74965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74965"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74965",
"url": "https://www.suse.com/security/cve/CVE-2026-74965"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74965",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74965"
},
{
"cve": "CVE-2026-74966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74966"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74966",
"url": "https://www.suse.com/security/cve/CVE-2026-74966"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74966",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74966"
},
{
"cve": "CVE-2026-74967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74967"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74967",
"url": "https://www.suse.com/security/cve/CVE-2026-74967"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74967",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74967"
},
{
"cve": "CVE-2026-74968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74968"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74968",
"url": "https://www.suse.com/security/cve/CVE-2026-74968"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74968",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74968"
},
{
"cve": "CVE-2026-74969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74969"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74969",
"url": "https://www.suse.com/security/cve/CVE-2026-74969"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74969",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74969"
},
{
"cve": "CVE-2026-74970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74970"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74970",
"url": "https://www.suse.com/security/cve/CVE-2026-74970"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74970",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74970"
},
{
"cve": "CVE-2026-74971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74971"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: UI Events \u0026 Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74971",
"url": "https://www.suse.com/security/cve/CVE-2026-74971"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74971",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74971"
},
{
"cve": "CVE-2026-74972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74972"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74972",
"url": "https://www.suse.com/security/cve/CVE-2026-74972"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74972",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74972"
},
{
"cve": "CVE-2026-74973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74973"
}
],
"notes": [
{
"category": "general",
"text": "Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74973",
"url": "https://www.suse.com/security/cve/CVE-2026-74973"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74973",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74973"
},
{
"cve": "CVE-2026-74974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74974"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74974",
"url": "https://www.suse.com/security/cve/CVE-2026-74974"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74974",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74974"
},
{
"cve": "CVE-2026-74976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74976"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74976",
"url": "https://www.suse.com/security/cve/CVE-2026-74976"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74976",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74976"
},
{
"cve": "CVE-2026-74977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74977"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74977",
"url": "https://www.suse.com/security/cve/CVE-2026-74977"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74977",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74977"
},
{
"cve": "CVE-2026-74978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74978"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74978",
"url": "https://www.suse.com/security/cve/CVE-2026-74978"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74978",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74978"
},
{
"cve": "CVE-2026-74979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74979"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74979",
"url": "https://www.suse.com/security/cve/CVE-2026-74979"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74979",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74979"
},
{
"cve": "CVE-2026-74981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74981"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74981",
"url": "https://www.suse.com/security/cve/CVE-2026-74981"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74981",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74981"
},
{
"cve": "CVE-2026-74982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74982"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74982",
"url": "https://www.suse.com/security/cve/CVE-2026-74982"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74982",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74982"
},
{
"cve": "CVE-2026-74983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74983"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74983",
"url": "https://www.suse.com/security/cve/CVE-2026-74983"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74983",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74983"
},
{
"cve": "CVE-2026-74984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74984"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74984",
"url": "https://www.suse.com/security/cve/CVE-2026-74984"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74984",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74984"
},
{
"cve": "CVE-2026-74985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74985"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74985",
"url": "https://www.suse.com/security/cve/CVE-2026-74985"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74985",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74985"
},
{
"cve": "CVE-2026-74986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74986"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74986",
"url": "https://www.suse.com/security/cve/CVE-2026-74986"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74986",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74986"
},
{
"cve": "CVE-2026-74987",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74987"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74987",
"url": "https://www.suse.com/security/cve/CVE-2026-74987"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74987",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74987"
},
{
"cve": "CVE-2026-74988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74988"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74988",
"url": "https://www.suse.com/security/cve/CVE-2026-74988"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74988",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74988"
},
{
"cve": "CVE-2026-74990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74990"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74990",
"url": "https://www.suse.com/security/cve/CVE-2026-74990"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74990",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libfreebl3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:libsoftokn3-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nspr-4.39-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-certs-3.125-160000.1.1.x86_64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.aarch64",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.ppc64le",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.s390x",
"SUSE Linux Micro 6.2:mozilla-nss-tools-3.125-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-31T16:16:32Z",
"details": "important"
}
],
"title": "CVE-2026-74990"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…