CLSA-2024-1730917239

Update of nss

No scoreFix available

update to CKBI 2.70 from NSS 3.104
updated certificates:
```
# Certificate "GLOBALTRUST 2020"
```
```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "OISTE WISeKey Global Root GC CA"

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

removed certificates:

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

# Certificate "E-Tugra Certification Authority"

```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```
```
# Certificate "TrustCor ECA-1"
```

# Certificate "E-Tugra Global Root CA RSA v3"

# Certificate "E-Tugra Global Root CA ECC v3"

added certificates:

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```
remove duplicated certificate record:

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

What each source reports

OSV No score

Update of nss

update to CKBI 2.70 from NSS 3.104
updated certificates:
```
# Certificate "GLOBALTRUST 2020"
```
```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "OISTE WISeKey Global Root GC CA"

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

removed certificates:

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

# Certificate "E-Tugra Certification Authority"

```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```
```
# Certificate "TrustCor ECA-1"
```

# Certificate "E-Tugra Global Root CA RSA v3"

# Certificate "E-Tugra Global Root CA ECC v3"

added certificates:

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```
remove duplicated certificate record:

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

Record: CLSA-2024-1730917239
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`nss` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-devel` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-pkcs11-devel` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-softokn` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-softokn-devel` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-softokn-freebl` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-softokn-freebl-devel` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-sysinit` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-tools` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-util` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1
`nss-util-devel` TuxCare:CentOS-Stream:8	before 3.90.0-7.el8.tuxcare.els1	3.90.0-7.el8.tuxcare.els1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2024-1730917239 is a vulnerability with no CVSS score yet in nss, published November 6, 2024. No source lists public exploit code. Fixed in nss 3.90.0-7.el8.tuxcare.els1.

References

errata.tuxcare.com/centos8stream-els/CLSA-2024-1730917239.html