CLSA-2024-1707379486
Update of alt-php
No scoreFix available
- Update ca-certificates database to 20231207:
- mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.64.
- The following certificates authorities were added:
Certificate "Atos TrustedRoot Root CA ECC G2 2020"
Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
Certificate "Atos TrustedRoot Root CA RSA G2 2020"
Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
Certificate "CommScope Public Trust ECC Root-01"
Certificate "CommScope Public Trust ECC Root-02"
Certificate "CommScope Public Trust RSA Root-01"
Certificate "CommScope Public Trust RSA Root-02"
Certificate "LAWtrust Root CA2 (4096)"
Certificate "Sectigo Public Email Protection Root E46"
Certificate "Sectigo Public Email Protection Root R46"
Certificate "Sectigo Public Server Authentication Root E46"
Certificate "Sectigo Public Server Authentication Root R46"
Certificate "SSL.com Client ECC Root CA 2022"
Certificate "SSL.com Client RSA Root CA 2022"
Certificate "SSL.com TLS ECC Root CA 2022"
Certificate "SSL.com TLS RSA Root CA 2022"
Certificate "TrustAsia Global Root CA G3"
Certificate "TrustAsia Global Root CA G4"
- The following certificates were removed:
Certificate "E-Tugra Certification Authority"
Certificate "Hongkong Post Root CA 1"
Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
Certificate "TrustCor ECA-1"
Certificate "TrustCor RootCert CA-1"
Certificate "TrustCor RootCert CA-2"
Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
What each source reports
OSV No score
Update of alt-php
- Update ca-certificates database to 20231207:
- mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.64.
- The following certificates authorities were added:
Certificate "Atos TrustedRoot Root CA ECC G2 2020"
Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
Certificate "Atos TrustedRoot Root CA RSA G2 2020"
Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
Certificate "CommScope Public Trust ECC Root-01"
Certificate "CommScope Public Trust ECC Root-02"
Certificate "CommScope Public Trust RSA Root-01"
Certificate "CommScope Public Trust RSA Root-02"
Certificate "LAWtrust Root CA2 (4096)"
Certificate "Sectigo Public Email Protection Root E46"
Certificate "Sectigo Public Email Protection Root R46"
Certificate "Sectigo Public Server Authentication Root E46"
Certificate "Sectigo Public Server Authentication Root R46"
Certificate "SSL.com Client ECC Root CA 2022"
Certificate "SSL.com Client RSA Root CA 2022"
Certificate "SSL.com TLS ECC Root CA 2022"
Certificate "SSL.com TLS RSA Root CA 2022"
Certificate "TrustAsia Global Root CA G3"
Certificate "TrustAsia Global Root CA G4"
- The following certificates were removed:
Certificate "E-Tugra Certification Authority"
Certificate "Hongkong Post Root CA 1"
Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
Certificate "TrustCor ECA-1"
Certificate "TrustCor RootCert CA-1"
Certificate "TrustCor RootCert CA-2"
Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
- Record
CLSA-2024-1707379486- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnss3TuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 |
libnss3-1dTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 |
libnss3-devTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 |
libnss3-nssdbTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 |
libnss3-toolsTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2024-1707379486 is a vulnerability with no CVSS score yet in libnss3, published February 8, 2024. No source lists public exploit code. Fixed in libnss3 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7.