CLSA-2024-1730916322
Update of nss
No scoreFix available
- update to CKBI 2.70 from NSS 3.104
- updated certificates:
# Certificate "GLOBALTRUST 2020"# Certificate "certSIGN ROOT CA"# Certificate "ACCVRAIZ1"# Certificate "OISTE WISeKey Global Root GC CA"- removed certificates:
# Certificate "Security Communication Root CA"# Certificate "Camerfirma Chambers of Commerce Root"# Certificate "Chambers of Commerce Root - 2008"# Certificate "Global Chambersign Root - 2008"# Certificate "E-Tugra Global Root CA RSA v3"# Certificate "E-Tugra Global Root CA ECC v3"- added certificates:
# Certificate "D-Trust SBR Root CA 1 2022"# Certificate "D-Trust SBR Root CA 2 2022"# Certificate "Telekom Security SMIME ECC Root 2021"# Certificate "Telekom Security TLS ECC Root 2020"# Certificate "Telekom Security SMIME RSA Root 2023"# Certificate "Telekom Security TLS RSA Root 2023"# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"# Certificate "TWCA CYBER Root CA"# Certificate "TWCA Global Root CA G2"# Certificate "SecureSign Root CA12"# Certificate "SecureSign Root CA14"# Certificate "SecureSign Root CA15"- remove duplicated certificate record:
# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
What each source reports
OSVNo score
Update of nss
- update to CKBI 2.70 from NSS 3.104
- updated certificates:
# Certificate "GLOBALTRUST 2020"# Certificate "certSIGN ROOT CA"# Certificate "ACCVRAIZ1"# Certificate "OISTE WISeKey Global Root GC CA"- removed certificates:
# Certificate "Security Communication Root CA"# Certificate "Camerfirma Chambers of Commerce Root"# Certificate "Chambers of Commerce Root - 2008"# Certificate "Global Chambersign Root - 2008"# Certificate "E-Tugra Global Root CA RSA v3"# Certificate "E-Tugra Global Root CA ECC v3"- added certificates:
# Certificate "D-Trust SBR Root CA 1 2022"# Certificate "D-Trust SBR Root CA 2 2022"# Certificate "Telekom Security SMIME ECC Root 2021"# Certificate "Telekom Security TLS ECC Root 2020"# Certificate "Telekom Security SMIME RSA Root 2023"# Certificate "Telekom Security TLS RSA Root 2023"# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"# Certificate "TWCA CYBER Root CA"# Certificate "TWCA Global Root CA G2"# Certificate "SecureSign Root CA12"# Certificate "SecureSign Root CA14"# Certificate "SecureSign Root CA15"- remove duplicated certificate record:
# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
- Record
CLSA-2024-1730916322- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-develTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-pkcs11-develTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-softoknTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-softokn-develTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-softokn-freeblTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-softokn-freebl-develTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-sysinitTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-toolsTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-utilTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
nss-util-develTuxCare:CentOS:8.5 | before 3.67.0-7.el8_5.tuxcare.els6 | 3.67.0-7.el8_5.tuxcare.els6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2024-1730916322 is a vulnerability with no CVSS score yet in nss, published November 6, 2024. No source lists public exploit code. Fixed in nss 3.67.0-7.el8_5.tuxcare.els6.