USN-8947-1
nss update
No scoreFix available
This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised.
What each source reports
OSV No score
nss update
This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised.
- Record
USN-8947-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nssUbuntu:Pro:14.04:LTS |
before 2:3.28.4-0ubuntu0.14.04.5+esm14, plus listed versions 2:3.15.1-1ubuntu12:3.15.2-12:3.15.3-12:3.15.3.1-12:3.15.3.1-1.1 Show 36 moreShow less2:3.15.3.1-1.1ubuntu12:3.15.4-1ubuntu32:3.15.4-1ubuntu42:3.15.4-1ubuntu52:3.15.4-1ubuntu62:3.15.4-1ubuntu72:3.15.4-1ubuntu7.12:3.17-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.22:3.17.4-0ubuntu0.14.04.12:3.19.2-0ubuntu0.14.04.12:3.19.2.1-0ubuntu0.14.04.12:3.19.2.1-0ubuntu0.14.04.22:3.21-0ubuntu0.14.04.12:3.21-0ubuntu0.14.04.22:3.23-0ubuntu0.14.04.12:3.26.2-0ubuntu0.14.04.32:3.28.4-0ubuntu0.14.04.12:3.28.4-0ubuntu0.14.04.22:3.28.4-0ubuntu0.14.04.32:3.28.4-0ubuntu0.14.04.42:3.28.4-0ubuntu0.14.04.52:3.28.4-0ubuntu0.14.04.5+esm12:3.28.4-0ubuntu0.14.04.5+esm22:3.28.4-0ubuntu0.14.04.5+esm32:3.28.4-0ubuntu0.14.04.5+esm42:3.28.4-0ubuntu0.14.04.5+esm52:3.28.4-0ubuntu0.14.04.5+esm62:3.28.4-0ubuntu0.14.04.5+esm72:3.28.4-0ubuntu0.14.04.5+esm82:3.28.4-0ubuntu0.14.04.5+esm92:3.28.4-0ubuntu0.14.04.5+esm102:3.28.4-0ubuntu0.14.04.5+esm112:3.28.4-0ubuntu0.14.04.5+esm122:3.28.4-0ubuntu0.14.04.5+esm13 |
2:3.28.4-0ubuntu0.14.04.5+esm14 |
nssUbuntu:Pro:16.04:LTS |
before 2:3.28.4-0ubuntu0.16.04.14+esm6, plus listed versions 2:3.19.2-1ubuntu12:3.19.2.1-0ubuntu12:3.21-1ubuntu22:3.21-1ubuntu32:3.21-1ubuntu4 Show 20 moreShow less2:3.23-0ubuntu0.16.04.12:3.26.2-0ubuntu0.16.04.22:3.28.4-0ubuntu0.16.04.12:3.28.4-0ubuntu0.16.04.22:3.28.4-0ubuntu0.16.04.32:3.28.4-0ubuntu0.16.04.42:3.28.4-0ubuntu0.16.04.52:3.28.4-0ubuntu0.16.04.62:3.28.4-0ubuntu0.16.04.82:3.28.4-0ubuntu0.16.04.92:3.28.4-0ubuntu0.16.04.102:3.28.4-0ubuntu0.16.04.112:3.28.4-0ubuntu0.16.04.122:3.28.4-0ubuntu0.16.04.132:3.28.4-0ubuntu0.16.04.142:3.28.4-0ubuntu0.16.04.14+esm12:3.28.4-0ubuntu0.16.04.14+esm22:3.28.4-0ubuntu0.16.04.14+esm32:3.28.4-0ubuntu0.16.04.14+esm42:3.28.4-0ubuntu0.16.04.14+esm5 |
2:3.28.4-0ubuntu0.16.04.14+esm6 |
nssUbuntu:Pro:18.04:LTS |
before 2:3.35-2ubuntu2.16+esm2, plus listed versions 2:3.32-1ubuntu32:3.34-1ubuntu12:3.35-2ubuntu22:3.35-2ubuntu2.12:3.35-2ubuntu2.2 Show 13 moreShow less2:3.35-2ubuntu2.32:3.35-2ubuntu2.52:3.35-2ubuntu2.62:3.35-2ubuntu2.72:3.35-2ubuntu2.82:3.35-2ubuntu2.92:3.35-2ubuntu2.112:3.35-2ubuntu2.122:3.35-2ubuntu2.132:3.35-2ubuntu2.142:3.35-2ubuntu2.152:3.35-2ubuntu2.162:3.35-2ubuntu2.16+esm1 |
2:3.35-2ubuntu2.16+esm2 |
nssUbuntu:Pro:20.04:LTS |
before 2:3.98-0ubuntu0.20.04.2+esm2, plus listed versions 2:3.45-1ubuntu22:3.47-1ubuntu12:3.47-1ubuntu22:3.48-1ubuntu12:3.49.1-1ubuntu1 Show 11 moreShow less2:3.49.1-1ubuntu1.12:3.49.1-1ubuntu1.22:3.49.1-1ubuntu1.42:3.49.1-1ubuntu1.52:3.49.1-1ubuntu1.62:3.49.1-1ubuntu1.72:3.49.1-1ubuntu1.82:3.49.1-1ubuntu1.92:3.98-0ubuntu0.20.04.12:3.98-0ubuntu0.20.04.22:3.98-0ubuntu0.20.04.2+esm1 |
2:3.98-0ubuntu0.20.04.2+esm2 |
nssUbuntu:22.04:LTS |
before 2:3.98-0ubuntu0.22.04.5, plus listed versions 2:3.68-1ubuntu12:3.68-1ubuntu22:3.68.2-0ubuntu12:3.68.2-0ubuntu1.12:3.68.2-0ubuntu1.2 Show 4 moreShow less2:3.98-0ubuntu0.22.04.12:3.98-0ubuntu0.22.04.22:3.98-0ubuntu0.22.04.32:3.98-0ubuntu0.22.04.4 |
2:3.98-0ubuntu0.22.04.5 |
nssUbuntu:24.04:LTS |
before 2:3.98-1ubuntu0.3, plus listed versions 2:3.92-12:3.94-12:3.95-12:3.96.1-12:3.98-12:3.98-1build12:3.98-1ubuntu0.12:3.98-1ubuntu0.2 |
2:3.98-1ubuntu0.3 |
nssUbuntu:26.10 |
before 2:3.127-1ubuntu0.1, plus listed versions 2:3.120-1ubuntu22:3.124-12:3.126-12:3.127-1 |
2:3.127-1ubuntu0.1 |
nssUbuntu:26.04:LTS |
before 2:3.120-1ubuntu2.2, plus listed versions 2:3.114-12:3.117-12:3.119-12:3.120-12:3.120-1ubuntu12:3.120-1ubuntu22:3.120-1ubuntu2.1 |
2:3.120-1ubuntu2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8947-1 is a vulnerability with no CVSS score yet in nss, published October 21, 2026. No source lists public exploit code. Fixed in nss 2:3.28.4-0ubuntu0.14.04.5+esm14.