USN-2504-1
nss update
No scoreFix available
The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.17.4 which includes the latest CA certificate bundle.
What each source reports
OSV No score
nss update
The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.17.4 which includes the latest CA certificate bundle.
- Record
USN-2504-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssUbuntu:14.04:LTS |
before 2:3.17.4-0ubuntu0.14.04.1, plus listed versions 2:3.15.1-1ubuntu12:3.15.2-12:3.15.3-12:3.15.3.1-12:3.15.3.1-1.1 Show 10 moreShow less2:3.15.3.1-1.1ubuntu12:3.15.4-1ubuntu32:3.15.4-1ubuntu42:3.15.4-1ubuntu52:3.15.4-1ubuntu62:3.15.4-1ubuntu72:3.15.4-1ubuntu7.12:3.17-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.2 |
2:3.17.4-0ubuntu0.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2504-1 is a vulnerability with no CVSS score yet in nss, published February 19, 2015. No source lists public exploit code. Fixed in nss 2:3.17.4-0ubuntu0.14.04.1.