CLSA-2025-1754382436
Update of nss
No scoreFix available
- Update ca-certificates database to 20250418:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.74.
- The following certificates were updated:
Certificate "Entrust Root Certification Authority - G4"
Certificate "Security Communication ECC RootCA1"
Certificate "BJCA Global Root CA1"
Certificate "BJCA Global Root CA2"
- The following certificates were added:
Certificate "D-TRUST BR Root CA 2 2023"
Certificate "D-TRUST EV Root CA 2 2023"
What each source reports
OSV No score
Update of nss
- Update ca-certificates database to 20250418:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.74.
- The following certificates were updated:
Certificate "Entrust Root Certification Authority - G4"
Certificate "Security Communication ECC RootCA1"
Certificate "BJCA Global Root CA1"
Certificate "BJCA Global Root CA2"
- The following certificates were added:
Certificate "D-TRUST BR Root CA 2 2023"
Certificate "D-TRUST EV Root CA 2 2023"
- Record
CLSA-2025-1754382436- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnss3TuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 |
libnss3-1dTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 |
libnss3-devTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 |
libnss3-nssdbTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 |
libnss3-toolsTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2025-1754382436 is a vulnerability with no CVSS score yet in libnss3, published August 5, 2025. No source lists public exploit code. Fixed in libnss3 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9.