Mozilla Network Security Service (NSS): TLS RSA decryption timing attack

Mozilla Network Security Service (NSS): TLS RSA decryption timing attack A vulnerability has been discovered in NSS, which can lead to the recovery of private data. nss 2025-08-06 2025-08-06 925027 local and remote 3.98 3.98

The Mozilla Network Security Service is a library implementing security features like SSL v.2/v.3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME and X.509 certificates.

A vulnerability has been discovered in Mozilla Network Security Service (NSS). Please review the CVE identifier referenced below for details.

Please review the referenced CVE identifier for details.

There is no known workaround at this time.

All Mozilla Network Security Service (NSS) users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=dev-libs/nss-3.98"

CVE-2023-5388 graaff graaff