CLSA-2025-1754337742
Update of nss
No scoreFix available
- update to CKBI 2.74 from NSS 3.110
- updated certificates:
-
# Certificate "Entrust.net Premium 2048 Secure Server CA" -
# Certificate "Entrust Root Certification Authority" -
# Certificate "AffirmTrust Commercial" -
# Certificate "AffirmTrust Networking" -
# Certificate "AffirmTrust Premium" -
# Certificate "AffirmTrust Premium ECC" -
# Certificate "Entrust Root Certification Authority - G2" -
# Certificate "Entrust Root Certification Authority - EC1" -
# Certificate "Entrust Root Certification Authority - G4" -
# Certificate "Security Communication ECC RootCA1" -
# Certificate "BJCA Global Root CA1" -
# Certificate "BJCA Global Root CA2" - added certificates:
-
# Certificate "D-TRUST BR Root CA 2 2023" -
# Certificate "D-TRUST EV Root CA 2 2023"
What each source reports
OSV No score
Update of nss
- update to CKBI 2.74 from NSS 3.110
- updated certificates:
-
# Certificate "Entrust.net Premium 2048 Secure Server CA" -
# Certificate "Entrust Root Certification Authority" -
# Certificate "AffirmTrust Commercial" -
# Certificate "AffirmTrust Networking" -
# Certificate "AffirmTrust Premium" -
# Certificate "AffirmTrust Premium ECC" -
# Certificate "Entrust Root Certification Authority - G2" -
# Certificate "Entrust Root Certification Authority - EC1" -
# Certificate "Entrust Root Certification Authority - G4" -
# Certificate "Security Communication ECC RootCA1" -
# Certificate "BJCA Global Root CA1" -
# Certificate "BJCA Global Root CA2" - added certificates:
-
# Certificate "D-TRUST BR Root CA 2 2023" -
# Certificate "D-TRUST EV Root CA 2 2023"
- Record
CLSA-2025-1754337742- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-develTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-pkcs11-develTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-softoknTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-softokn-develTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-softokn-freeblTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-softokn-freebl-develTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-sysinitTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-toolsTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-utilTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
nss-util-develTuxCare:CentOS-Stream:8 |
before 3.90.0-7.el8.tuxcare.els2 | 3.90.0-7.el8.tuxcare.els2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2025-1754337742 is a vulnerability with no CVSS score yet in nss, published August 4, 2025. No source lists public exploit code. Fixed in nss 3.90.0-7.el8.tuxcare.els2.