CLSA-2025-1754382679
Update of nss
No scoreFix available
- Update ca-certificates database to 20250418:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.74.
- The following certificates were updated:
Certificate "Entrust.net Premium 2048 Secure Server CA"
Certificate "Entrust Root Certification Authority"
Certificate "AffirmTrust Commercial"
Certificate "AffirmTrust Networking"
Certificate "AffirmTrust Premium"
Certificate "AffirmTrust Premium ECC"
Certificate "Entrust Root Certification Authority - G2"
Certificate "Entrust Root Certification Authority - EC1"
Certificate "GLOBALTRUST 2020"
Certificate "certSIGN ROOT CA"
Certificate "ACCVRAIZ1"
Certificate "Entrust Root Certification Authority - G4"
Certificate "Security Communication ECC RootCA1"
Certificate "BJCA Global Root CA1"
Certificate "BJCA Global Root CA2"
- The following certificates were added:
Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
Certificate "TWCA CYBER Root CA"
Certificate "TWCA Global Root CA G2"
Certificate "SecureSign Root CA12"
Certificate "SecureSign Root CA14"
Certificate "SecureSign Root CA15"
Certificate "D-TRUST BR Root CA 2 2023"
Certificate "D-TRUST EV Root CA 2 2023"
What each source reports
OSV No score
Update of nss
- Update ca-certificates database to 20250418:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.74.
- The following certificates were updated:
Certificate "Entrust.net Premium 2048 Secure Server CA"
Certificate "Entrust Root Certification Authority"
Certificate "AffirmTrust Commercial"
Certificate "AffirmTrust Networking"
Certificate "AffirmTrust Premium"
Certificate "AffirmTrust Premium ECC"
Certificate "Entrust Root Certification Authority - G2"
Certificate "Entrust Root Certification Authority - EC1"
Certificate "GLOBALTRUST 2020"
Certificate "certSIGN ROOT CA"
Certificate "ACCVRAIZ1"
Certificate "Entrust Root Certification Authority - G4"
Certificate "Security Communication ECC RootCA1"
Certificate "BJCA Global Root CA1"
Certificate "BJCA Global Root CA2"
- The following certificates were added:
Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
Certificate "TWCA CYBER Root CA"
Certificate "TWCA Global Root CA G2"
Certificate "SecureSign Root CA12"
Certificate "SecureSign Root CA14"
Certificate "SecureSign Root CA15"
Certificate "D-TRUST BR Root CA 2 2023"
Certificate "D-TRUST EV Root CA 2 2023"
- Record
CLSA-2025-1754382679- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnss3TuxCare:Ubuntu:20.04 |
before 2:3.98-0ubuntu0.20.04.2+tuxcare.els1 | 2:3.98-0ubuntu0.20.04.2+tuxcare.els1 |
libnss3-devTuxCare:Ubuntu:20.04 |
before 2:3.98-0ubuntu0.20.04.2+tuxcare.els1 | 2:3.98-0ubuntu0.20.04.2+tuxcare.els1 |
libnss3-toolsTuxCare:Ubuntu:20.04 |
before 2:3.98-0ubuntu0.20.04.2+tuxcare.els1 | 2:3.98-0ubuntu0.20.04.2+tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2025-1754382679 is a vulnerability with no CVSS score yet in libnss3, published August 5, 2025. No source lists public exploit code. Fixed in libnss3 2:3.98-0ubuntu0.20.04.2+tuxcare.els1.