CLSA-2024-1708028290

Update of nss

No scoreFix available

Update to CKBI 2.64 from NSS 3.95
Removed:

# Certificate "E-Tugra Certification Authority"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Symantec Class 1 Public Primary Certification Authority - G6"

# Certificate "Symantec Class 2 Public Primary Certification Authority - G6"

```
# Certificate "TrustCor ECA-1"
```
```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```

# Certificate "Verisign Class 1 Public Primary Certification Authority - G3"

# Certificate "Verisign Class 2 Public Primary Certification Authority - G3"

Added:

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

Update test certificates

What each source reports

OSV No score

Update of nss

Update to CKBI 2.64 from NSS 3.95
Removed:

# Certificate "E-Tugra Certification Authority"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Symantec Class 1 Public Primary Certification Authority - G6"

# Certificate "Symantec Class 2 Public Primary Certification Authority - G6"

```
# Certificate "TrustCor ECA-1"
```
```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```

# Certificate "Verisign Class 1 Public Primary Certification Authority - G3"

# Certificate "Verisign Class 2 Public Primary Certification Authority - G3"

Added:

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

Update test certificates

Record: CLSA-2024-1708028290
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`nss` TuxCare:CentOS:6	before 3.44.0-12.el6.tuxcare.els5	3.44.0-12.el6.tuxcare.els5
`nss-devel` TuxCare:CentOS:6	before 3.44.0-12.el6.tuxcare.els5	3.44.0-12.el6.tuxcare.els5
`nss-pkcs11-devel` TuxCare:CentOS:6	before 3.44.0-12.el6.tuxcare.els5	3.44.0-12.el6.tuxcare.els5
`nss-sysinit` TuxCare:CentOS:6	before 3.44.0-12.el6.tuxcare.els5	3.44.0-12.el6.tuxcare.els5
`nss-tools` TuxCare:CentOS:6	before 3.44.0-12.el6.tuxcare.els5	3.44.0-12.el6.tuxcare.els5

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2024-1708028290 is a vulnerability with no CVSS score yet in nss, published February 15, 2024. No source lists public exploit code. Fixed in nss 3.44.0-12.el6.tuxcare.els5.

References

errata.cloudlinux.com/els6/CLSA-2024-1708028290.html