CLSA-2024-1708025814
Update of nss
No scoreFix available
- Update to CKBI 2.64 from NSS 3.95
- Removed:
-
# Certificate "E-Tugra Certification Authority" -
# Certificate "Hongkong Post Root CA 1" -
# Certificate "Symantec Class 1 Public Primary Certification Authority - G6" -
# Certificate "Symantec Class 2 Public Primary Certification Authority - G6" -
# Certificate "TrustCor ECA-1" -
# Certificate "TrustCor RootCert CA-1" -
# Certificate "TrustCor RootCert CA-2" -
# Certificate "Verisign Class 1 Public Primary Certification Authority - G3" -
# Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - Added:
-
# Certificate "Atos TrustedRoot Root CA ECC G2 2020" -
# Certificate "Atos TrustedRoot Root CA ECC TLS 2021" -
# Certificate "Atos TrustedRoot Root CA RSA G2 2020" -
# Certificate "Atos TrustedRoot Root CA RSA TLS 2021" -
# Certificate "CommScope Public Trust ECC Root-01" -
# Certificate "CommScope Public Trust ECC Root-02" -
# Certificate "CommScope Public Trust RSA Root-01" -
# Certificate "CommScope Public Trust RSA Root-02" -
# Certificate "LAWtrust Root CA2 (4096)" -
# Certificate "Sectigo Public Email Protection Root E46" -
# Certificate "Sectigo Public Email Protection Root R46" -
# Certificate "Sectigo Public Server Authentication Root E46" -
# Certificate "Sectigo Public Server Authentication Root R46" -
# Certificate "SSL.com Client ECC Root CA 2022" -
# Certificate "SSL.com Client RSA Root CA 2022" -
# Certificate "SSL.com TLS ECC Root CA 2022" -
# Certificate "SSL.com TLS RSA Root CA 2022" -
# Certificate "TrustAsia Global Root CA G3" -
# Certificate "TrustAsia Global Root CA G4" - Updated test certificates
What each source reports
OSV No score
Update of nss
- Update to CKBI 2.64 from NSS 3.95
- Removed:
-
# Certificate "E-Tugra Certification Authority" -
# Certificate "Hongkong Post Root CA 1" -
# Certificate "Symantec Class 1 Public Primary Certification Authority - G6" -
# Certificate "Symantec Class 2 Public Primary Certification Authority - G6" -
# Certificate "TrustCor ECA-1" -
# Certificate "TrustCor RootCert CA-1" -
# Certificate "TrustCor RootCert CA-2" -
# Certificate "Verisign Class 1 Public Primary Certification Authority - G3" -
# Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - Added:
-
# Certificate "Atos TrustedRoot Root CA ECC G2 2020" -
# Certificate "Atos TrustedRoot Root CA ECC TLS 2021" -
# Certificate "Atos TrustedRoot Root CA RSA G2 2020" -
# Certificate "Atos TrustedRoot Root CA RSA TLS 2021" -
# Certificate "CommScope Public Trust ECC Root-01" -
# Certificate "CommScope Public Trust ECC Root-02" -
# Certificate "CommScope Public Trust RSA Root-01" -
# Certificate "CommScope Public Trust RSA Root-02" -
# Certificate "LAWtrust Root CA2 (4096)" -
# Certificate "Sectigo Public Email Protection Root E46" -
# Certificate "Sectigo Public Email Protection Root R46" -
# Certificate "Sectigo Public Server Authentication Root E46" -
# Certificate "Sectigo Public Server Authentication Root R46" -
# Certificate "SSL.com Client ECC Root CA 2022" -
# Certificate "SSL.com Client RSA Root CA 2022" -
# Certificate "SSL.com TLS ECC Root CA 2022" -
# Certificate "SSL.com TLS RSA Root CA 2022" -
# Certificate "TrustAsia Global Root CA G3" -
# Certificate "TrustAsia Global Root CA G4" - Updated test certificates
- Record
CLSA-2024-1708025814- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-develTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-pkcs11-develTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-softoknTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-softokn-develTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-softokn-freeblTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-softokn-freebl-develTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-sysinitTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-toolsTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-utilTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
nss-util-develTuxCare:CentOS:8.4 |
before 3.67.0-6.el8.4.tuxcare.els6 | 3.67.0-6.el8.4.tuxcare.els6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2024-1708025814 is a vulnerability with no CVSS score yet in nss, published February 15, 2024. No source lists public exploit code. Fixed in nss 3.67.0-6.el8.4.tuxcare.els6.