CLSA-2025-1754382501
Update of nss
No scoreFix available
- Update ca-certificates database to 20250418:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.74.
- The following certificates were updated:
Certificate "Entrust Root Certification Authority - G4"
Certificate "Security Communication ECC RootCA1"
Certificate "BJCA Global Root CA1"
Certificate "BJCA Global Root CA2"
- The following certificates were added:
Certificate "D-TRUST BR Root CA 2 2023"
Certificate "D-TRUST EV Root CA 2 2023"
What each source reports
OSV No score
Update of nss
- Update ca-certificates database to 20250418:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.74.
- The following certificates were updated:
Certificate "Entrust Root Certification Authority - G4"
Certificate "Security Communication ECC RootCA1"
Certificate "BJCA Global Root CA1"
Certificate "BJCA Global Root CA2"
- The following certificates were added:
Certificate "D-TRUST BR Root CA 2 2023"
Certificate "D-TRUST EV Root CA 2 2023"
- Record
CLSA-2025-1754382501- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnss3TuxCare:Ubuntu:18.04 |
before 2:3.35-2ubuntu2.16+tuxcare.els4 | 2:3.35-2ubuntu2.16+tuxcare.els4 |
libnss3-devTuxCare:Ubuntu:18.04 |
before 2:3.35-2ubuntu2.16+tuxcare.els4 | 2:3.35-2ubuntu2.16+tuxcare.els4 |
libnss3-toolsTuxCare:Ubuntu:18.04 |
before 2:3.35-2ubuntu2.16+tuxcare.els4 | 2:3.35-2ubuntu2.16+tuxcare.els4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2025-1754382501 is a vulnerability with no CVSS score yet in libnss3, published August 5, 2025. No source lists public exploit code. Fixed in libnss3 2:3.35-2ubuntu2.16+tuxcare.els4.