CLSA-2026-1771005847
Update of nss
No scoreFix available
- Update ca-certificates database to 20260129:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.82.
- The following certificates were updated:
Certificate "GlobalSign Root CA"
Certificate "Entrust.net Premium 2048 Secure Server CA"
Certificate "Comodo AAA Services root"
Certificate "XRamp Global CA Root"
Certificate "Go Daddy Class 2 CA"
Certificate "Starfield Class 2 CA"
- The following certificates were added:
Certificate "TrustAsia SMIME ECC Root CA"
Certificate "TrustAsia SMIME RSA Root CA"
Certificate "TrustAsia TLS ECC Root CA"
Certificate "TrustAsia TLS RSA Root CA"
Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
Certificate "SwissSign RSA TLS Root CA 2022 - 1"
Certificate "OISTE Client Root ECC G1"
Certificate "OISTE Client Root RSA G1"
Certificate "OISTE Server Root ECC G1"
Certificate " OISTE Server Root RSA G1"
- The following certificates were removed:
Certificate "Baltimore CyberTrust Root"
What each source reports
OSV No score
Update of nss
- Update ca-certificates database to 20260129:
- mozilla{certdata.h,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.82.
- The following certificates were updated:
Certificate "GlobalSign Root CA"
Certificate "Entrust.net Premium 2048 Secure Server CA"
Certificate "Comodo AAA Services root"
Certificate "XRamp Global CA Root"
Certificate "Go Daddy Class 2 CA"
Certificate "Starfield Class 2 CA"
- The following certificates were added:
Certificate "TrustAsia SMIME ECC Root CA"
Certificate "TrustAsia SMIME RSA Root CA"
Certificate "TrustAsia TLS ECC Root CA"
Certificate "TrustAsia TLS RSA Root CA"
Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
Certificate "SwissSign RSA TLS Root CA 2022 - 1"
Certificate "OISTE Client Root ECC G1"
Certificate "OISTE Client Root RSA G1"
Certificate "OISTE Server Root ECC G1"
Certificate " OISTE Server Root RSA G1"
- The following certificates were removed:
Certificate "Baltimore CyberTrust Root"
- Record
CLSA-2026-1771005847- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnss3TuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 |
libnss3-1dTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 |
libnss3-devTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 |
libnss3-nssdbTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 |
libnss3-toolsTuxCare:Ubuntu:16.04 |
before 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 | 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1771005847 is a vulnerability with no CVSS score yet in libnss3, published February 13, 2026. No source lists public exploit code. Fixed in libnss3 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els10.