{"id":"CLSA-2023-1676570255","aliases":[],"status":"published","title":"Update of nss","description":"- Update to CKBI 2.60 from NSS 3.86\n- Added:\n-     # Certificate \"Autoridad de Certificacion Firmaprofesional CIF A62634068\"\n-     # Certificate \"Certainly Root E1\"\n-     # Certificate \"Certainly Root R1\"\n-     # Certificate \"DigiCert SMIME ECC P384 Root G5\"\n-     # Certificate \"DigiCert SMIME RSA4096 Root G5\"\n-     # Certificate \"DigiCert TLS ECC P384 Root G5\"\n-     # Certificate \"DigiCert TLS RSA4096 Root G5\"\n-     # Certificate \"DIGITALSIGN GLOBAL ROOT ECDSA CA\"\n-     # Certificate \"DIGITALSIGN GLOBAL ROOT RSA CA\"\n-     # Certificate \"D-TRUST BR Root CA 1 2020\"\n-     # Certificate \"D-TRUST EV Root CA 1 2020\"\n-     # Certificate \"E-Tugra Global Root CA ECC v3\"\n-     # Certificate \"E-Tugra Global Root CA RSA v3\"\n-     # Certificate \"HARICA Client ECC Root CA 2021\"\n-     # Certificate \"HARICA Client RSA Root CA 2021\"\n-     # Certificate \"HARICA TLS ECC Root CA 2021\"\n-     # Certificate \"HARICA TLS RSA Root CA 2021\"\n-     # Certificate \"HiPKI Root CA - G1\"\n-     # Certificate \"ISRG Root X2\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"Security Communication RootCA3\"\n-     # Certificate \"Telia Root CA v2\"\n-     # Certificate \"TunTrust Root CA\"\n-     # Certificate \"vTrus ECC Root CA\"\n-     # Certificate \"vTrus Root CA\"\n- Removed:\n-     # Certificate \"Camerfirma Global Chambersign Root\"\n-     # Certificate \"Cybertrust Global Root\"\n-     # Certificate \"DST Root CA X3\"\n-     # Certificate \"EC-ACC\"\n-     # Certificate \"Explicitly Distrusted DigiNotar PKIoverheid G2\"\n-     # Certificate \"GlobalSign Root CA - R2\"\n-     # Certificate \"Hellenic Academic and Research Institutions RootCA 2011\"\n-     # Certificate \"Network Solutions Certificate Authority\"\n-     # Certificate \"Staat der Nederlanden EV Root CA\"\n-     # Certificate \"SwissSign Platinum CA - G2\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-02-16T17:57:35Z","modified":"2026-06-01T00:33:20Z","fixes":[{"ecosystem":"TuxCare:CentOS:8.4","package":"nss","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-devel","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-pkcs11-devel","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn-devel","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn-freebl","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn-freebl-devel","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-sysinit","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-tools","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-util","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"nss-util-devel","fixed_in":["3.67.0-6.el8.4.tuxcare.els2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-6.el8.4.tuxcare.els2"}]}]}],"references":[{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1676570255.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2023-1676570255","title":"Update of nss","description":"- Update to CKBI 2.60 from NSS 3.86\n- Added:\n-     # Certificate \"Autoridad de Certificacion Firmaprofesional CIF A62634068\"\n-     # Certificate \"Certainly Root E1\"\n-     # Certificate \"Certainly Root R1\"\n-     # Certificate \"DigiCert SMIME ECC P384 Root G5\"\n-     # Certificate \"DigiCert SMIME RSA4096 Root G5\"\n-     # Certificate \"DigiCert TLS ECC P384 Root G5\"\n-     # Certificate \"DigiCert TLS RSA4096 Root G5\"\n-     # Certificate \"DIGITALSIGN GLOBAL ROOT ECDSA CA\"\n-     # Certificate \"DIGITALSIGN GLOBAL ROOT RSA CA\"\n-     # Certificate \"D-TRUST BR Root CA 1 2020\"\n-     # Certificate \"D-TRUST EV Root CA 1 2020\"\n-     # Certificate \"E-Tugra Global Root CA ECC v3\"\n-     # Certificate \"E-Tugra Global Root CA RSA v3\"\n-     # Certificate \"HARICA Client ECC Root CA 2021\"\n-     # Certificate \"HARICA Client RSA Root CA 2021\"\n-     # Certificate \"HARICA TLS ECC Root CA 2021\"\n-     # Certificate \"HARICA TLS RSA Root CA 2021\"\n-     # Certificate \"HiPKI Root CA - G1\"\n-     # Certificate \"ISRG Root X2\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"Security Communication RootCA3\"\n-     # Certificate \"Telia Root CA v2\"\n-     # Certificate \"TunTrust Root CA\"\n-     # Certificate \"vTrus ECC Root CA\"\n-     # Certificate \"vTrus Root CA\"\n- Removed:\n-     # Certificate \"Camerfirma Global Chambersign Root\"\n-     # Certificate \"Cybertrust Global Root\"\n-     # Certificate \"DST Root CA X3\"\n-     # Certificate \"EC-ACC\"\n-     # Certificate \"Explicitly Distrusted DigiNotar PKIoverheid G2\"\n-     # Certificate \"GlobalSign Root CA - R2\"\n-     # Certificate \"Hellenic Academic and Research Institutions RootCA 2011\"\n-     # Certificate \"Network Solutions Certificate Authority\"\n-     # Certificate \"Staat der Nederlanden EV Root CA\"\n-     # Certificate \"SwissSign Platinum CA - G2\"","status":"published","published":"2023-02-16T17:57:35Z","modified":"2026-06-01T00:33:20.309140607Z","updated_at":"2026-11-02T15:43:40.176048Z"}]}}