CLSA-2025-1754680650
Update of nss
No scoreFix available
- update to CKBI 2.74 from NSS 3.110
- updated certificates:
-
# Certificate "certSIGN ROOT CA" -
# Certificate "ACCVRAIZ1" -
# Certificate "Entrust Root Certification Authority - G4" -
# Certificate "Security Communication ECC RootCA1" -
# Certificate "BJCA Global Root CA1" -
# Certificate "BJCA Global Root CA2" - added certificates:
-
# Certificate "TWCA CYBER Root CA" -
# Certificate "TWCA Global Root CA G2" -
# Certificate "SecureSign Root CA12" -
# Certificate "SecureSign Root CA14" -
# Certificate "SecureSign Root CA15" -
# Certificate "D-TRUST BR Root CA 2 2023" -
# Certificate "D-TRUST EV Root CA 2 2023"
What each source reports
OSV No score
Update of nss
- update to CKBI 2.74 from NSS 3.110
- updated certificates:
-
# Certificate "certSIGN ROOT CA" -
# Certificate "ACCVRAIZ1" -
# Certificate "Entrust Root Certification Authority - G4" -
# Certificate "Security Communication ECC RootCA1" -
# Certificate "BJCA Global Root CA1" -
# Certificate "BJCA Global Root CA2" - added certificates:
-
# Certificate "TWCA CYBER Root CA" -
# Certificate "TWCA Global Root CA G2" -
# Certificate "SecureSign Root CA12" -
# Certificate "SecureSign Root CA14" -
# Certificate "SecureSign Root CA15" -
# Certificate "D-TRUST BR Root CA 2 2023" -
# Certificate "D-TRUST EV Root CA 2 2023"
- Record
CLSA-2025-1754680650- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssTuxCare:CentOS:6 |
before 3.44.0-12.el6.tuxcare.els7 | 3.44.0-12.el6.tuxcare.els7 |
nss-develTuxCare:CentOS:6 |
before 3.44.0-12.el6.tuxcare.els7 | 3.44.0-12.el6.tuxcare.els7 |
nss-pkcs11-develTuxCare:CentOS:6 |
before 3.44.0-12.el6.tuxcare.els7 | 3.44.0-12.el6.tuxcare.els7 |
nss-sysinitTuxCare:CentOS:6 |
before 3.44.0-12.el6.tuxcare.els7 | 3.44.0-12.el6.tuxcare.els7 |
nss-toolsTuxCare:CentOS:6 |
before 3.44.0-12.el6.tuxcare.els7 | 3.44.0-12.el6.tuxcare.els7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2025-1754680650 is a vulnerability with no CVSS score yet in nss, published August 8, 2025. No source lists public exploit code. Fixed in nss 3.44.0-12.el6.tuxcare.els7.