CLSA-2024-1731001050

Update of nss

No scoreFix available

update to CKBI 2.70 from NSS 3.104
updated certificates:
```
# Certificate "GLOBALTRUST 2020"
```
```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "OISTE WISeKey Global Root GC CA"

removed certificates:

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

added certificates:

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```

What each source reports

OSVNo score

Update of nss

update to CKBI 2.70 from NSS 3.104
updated certificates:
```
# Certificate "GLOBALTRUST 2020"
```
```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "OISTE WISeKey Global Root GC CA"

removed certificates:

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

added certificates:

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```

Record: CLSA-2024-1731001050
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`nspr` TuxCare:AlmaLinux:9.2	before 4.35.0-3.el9_2.tuxcare.els5	4.35.0-3.el9_2.tuxcare.els5
`nspr-devel` TuxCare:AlmaLinux:9.2	before 4.35.0-3.el9_2.tuxcare.els5	4.35.0-3.el9_2.tuxcare.els5
`nss` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-pkcs11-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-softokn` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-softokn-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-softokn-freebl` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-softokn-freebl-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-sysinit` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-tools` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-util` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5
`nss-util-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-3.el9_2.tuxcare.els5	3.90.0-3.el9_2.tuxcare.els5

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2024-1731001050 is a vulnerability with no CVSS score yet in nss, published November 7, 2024. No source lists public exploit code. Fixed in nspr 4.35.0-3.el9_2.tuxcare.els5.

References

errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1731001050.html