CLSA-2025-1754382809

Update of nss

No scoreFix available

update to CKBI 2.78 from NSS 3.113
updated certificates:

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Entrust Root Certification Authority"

```
# Certificate "AffirmTrust Commercial"
```
```
# Certificate "AffirmTrust Networking"
```
```
# Certificate "AffirmTrust Premium"
```

# Certificate "AffirmTrust Premium ECC"

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "GLOBALTRUST 2020"
```
```
# Certificate "GlobalSign Root CA"
```

# Certificate "Comodo AAA Services root"

```
# Certificate "XRamp Global CA Root"
```
```
# Certificate "Go Daddy Class 2 CA"
```
```
# Certificate "Starfield Class 2 CA"
```

# Certificate "ePKI Root Certification Authority"

```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "OISTE WISeKey Global Root GC CA"

# Certificate "Entrust Root Certification Authority - G4"

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

# Certificate "Security Communication ECC RootCA1"

```
# Certificate "BJCA Global Root CA1"
```
```
# Certificate "BJCA Global Root CA2"
```
removed certificates:

# Certificate "Baltimore CyberTrust Root"

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

# Certificate "E-Tugra Certification Authority"

```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```
```
# Certificate "TrustCor ECA-1"
```
added certificates:

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```

# Certificate "D-TRUST BR Root CA 2 2023"

# Certificate "D-TRUST EV Root CA 2 2023"

What each source reports

OSV No score

Update of nss

update to CKBI 2.78 from NSS 3.113
updated certificates:

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Entrust Root Certification Authority"

```
# Certificate "AffirmTrust Commercial"
```
```
# Certificate "AffirmTrust Networking"
```
```
# Certificate "AffirmTrust Premium"
```

# Certificate "AffirmTrust Premium ECC"

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "GLOBALTRUST 2020"
```
```
# Certificate "GlobalSign Root CA"
```

# Certificate "Comodo AAA Services root"

```
# Certificate "XRamp Global CA Root"
```
```
# Certificate "Go Daddy Class 2 CA"
```
```
# Certificate "Starfield Class 2 CA"
```

# Certificate "ePKI Root Certification Authority"

```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "OISTE WISeKey Global Root GC CA"

# Certificate "Entrust Root Certification Authority - G4"

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

# Certificate "Security Communication ECC RootCA1"

```
# Certificate "BJCA Global Root CA1"
```
```
# Certificate "BJCA Global Root CA2"
```
removed certificates:

# Certificate "Baltimore CyberTrust Root"

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

# Certificate "E-Tugra Certification Authority"

```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```
```
# Certificate "TrustCor ECA-1"
```
added certificates:

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```

# Certificate "D-TRUST BR Root CA 2 2023"

# Certificate "D-TRUST EV Root CA 2 2023"

Record: CLSA-2025-1754382809
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`nspr` TuxCare:AlmaLinux:9.2	before 4.35.0-6.el9_2.tuxcare.1.els1	4.35.0-6.el9_2.tuxcare.1.els1
`nspr-devel` TuxCare:AlmaLinux:9.2	before 4.35.0-6.el9_2.tuxcare.1.els1	4.35.0-6.el9_2.tuxcare.1.els1
`nss` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-pkcs11-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-softokn` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-softokn-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-softokn-freebl` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-softokn-freebl-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-sysinit` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-tools` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-util` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1
`nss-util-devel` TuxCare:AlmaLinux:9.2	before 3.90.0-6.el9_2.tuxcare.1.els1	3.90.0-6.el9_2.tuxcare.1.els1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2025-1754382809 is a vulnerability with no CVSS score yet in nss, published August 5, 2025. No source lists public exploit code. Fixed in nspr 4.35.0-6.el9_2.tuxcare.1.els1.

References

errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1754382809.html