{"id":"CLSA-2023-1691083341","aliases":[],"status":"published","title":"Update of alt-php","description":"* Update ca-certificates database to 20230629:\n     - mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.62.\n     - The following certificate authorities were added:\n       # Certificate \"AC RAIZ FNMT-RCM SERVIDORES SEGUROS\"\n       # Certificate \"ANF Secure Server Root CA\"\n       # Certificate \"BJCA Global Root CA1\"\n       # Certificate \"BJCA Global Root CA2\"\n       # Certificate \"Certainly Root E1\"\n       # Certificate \"Certainly Root R1\"\n       # Certificate \"Certigna Root CA\"\n       # Certificate \"certSIGN Root CA G2\"\n       # Certificate \"Certum EC-384 CA\"\n       # Certificate \"Certum Trusted Root CA\"\n       # Certificate \"DigiCert SMIME ECC P384 Root G5\"\n       # Certificate \"DigiCert SMIME RSA4096 Root G5\"\n       # Certificate \"DigiCert TLS ECC P384 Root G5\"\n       # Certificate \"DigiCert TLS RSA4096 Root G5\"\n       # Certificate \"DIGITALSIGN GLOBAL ROOT ECDSA CA\"\n       # Certificate \"DIGITALSIGN GLOBAL ROOT RSA CA\"\n       # Certificate \"D-TRUST BR Root CA 1 2020\"\n       # Certificate \"D-TRUST EV Root CA 1 2020\"\n       # Certificate \"emSign ECC Root CA - C3\"\n       # Certificate \"emSign ECC Root CA - G3\"\n       # Certificate \"emSign Root CA - C1\"\n       # Certificate \"emSign Root CA - G1\"\n       # Certificate \"Entrust Root Certification Authority - G4\"\n       # Certificate \"e-Szigno Root CA 2017\"\n       # Certificate \"E-Tugra Global Root CA ECC v3\"\n       # Certificate \"E-Tugra Global Root CA RSA v3\"\n       # Certificate \"GlobalSign Root CA - R6\"\n       # Certificate \"GlobalSign Root E46\"\n       # Certificate \"GlobalSign Root R46\"\n       # Certificate \"GlobalSign Secure Mail Root E45\"\n       # Certificate \"GlobalSign Secure Mail Root R45\"\n       # Certificate \"GLOBALTRUST 2020\"\n       # Certificate \"GTS Root R1\"\n       # Certificate \"GTS Root R2\"\n       # Certificate \"GTS Root R3\"\n       # Certificate \"GTS Root R4\"\n       # Certificate \"HARICA Client ECC Root CA 2021\"\n       # Certificate \"HARICA Client RSA Root CA 2021\"\n       # Certificate \"HARICA TLS ECC Root CA 2021\"\n       # Certificate \"HARICA TLS RSA Root CA 2021\"\n       # Certificate \"HiPKI Root CA - G1\"\n       # Certificate \"Hongkong Post Root CA 3\"\n       # Certificate \"ISRG Root X2\"\n       # Certificate \"Microsoft ECC Root Certificate Authority 2017\"\n       # Certificate \"Microsoft RSA Root Certificate Authority 2017\"\n       # Certificate \"NAVER Global Root Certification Authority\"\n       # Certificate \"OISTE WISeKey Global Root GC CA\"\n       # Certificate \"Security Communication ECC RootCA1\"\n       # Certificate \"Security Communication RootCA3\"\n       # Certificate \"Telia Root CA v2\"\n       # Certificate \"Trustwave Global Certification Authority\"\n       # Certificate \"Trustwave Global ECC P256 Certification Authority\"\n       # Certificate \"Trustwave Global ECC P384 Certification Authority\"\n       # Certificate \"TunTrust Root CA\"\n       # Certificate \"UCA Extended Validation Root\"\n       # Certificate \"UCA Global G2 Root\"\n       # Certificate \"vTrus ECC Root CA\"\n       # Certificate \"vTrus Root CA\"\n       - The following certificate authorities were removed (-):\n       # Certificate \"AC Raiz Certicamara S.A.\"\n       # Certificate \"AddTrust External Root\"\n       # Certificate \"AddTrust Low-Value Services Root\"\n       # Certificate \"Camerfirma Global Chambersign Root\"\n       # Certificate \"Certinomis - Root CA\"\n       # Certificate \"Certplus Class 2 Primary CA\"\n       # Certificate \"Certplus Root CA G1\"\n       # Certificate \"Certplus Root CA G2\"\n       # Certificate \"ComSign CA\"\n       # Certificate \"Cybertrust Global Root\"\n       # Certificate \"Deutsche Telekom Root CA 2\"\n       # Certificate \"DST Root CA X3\"\n       # Certificate \"EC-ACC\"\n       # Certificate \"EE Certification Centre Root CA\"\n       # Certificate \"Explicitly Distrusted DigiNotar PKIoverheid G2\"\n       # Certificate \"GeoTrust Global CA\"\n       # Certificate \"GeoTrust Primary Certification Authority\"\n       # Certificate \"GeoTrust Primary Certification Authority - G2\"\n       # Certificate \"GeoTrust Primary Certification Authority - G3\"\n       # Certificate \"GeoTrust Universal CA\"\n       # Certificate \"GeoTrust Universal CA 2\"\n       # Certificate \"GlobalSign Root CA - R2\"\n       # Certificate \"Hellenic Academic and Research Institutions RootCA 2011\"\n       # Certificate \"LuxTrust Global Root 2\"\n       # Certificate \"Network Solutions Certificate Authority\"\n       # Certificate \"OpenTrust Root CA G1\"\n       # Certificate \"OpenTrust Root CA G2\"\n       # Certificate \"OpenTrust Root CA G3\"\n       # Certificate \"QuoVadis Root CA\"\n       # Certificate \"Sonera Class 2 Root CA\"\n       # Certificate \"Staat der Nederlanden EV Root CA\"\n       # Certificate \"Staat der Nederlanden Root CA - G2\"\n       # Certificate \"S-TRUST Universal Root CA\"\n       # Certificate \"Swisscom Root CA 2\"\n       # Certificate \"SwissSign Platinum CA - G2\"\n       # Certificate \"Symantec Class 1 Public Primary Certification Authority - G4\"\n       # Certificate \"Symantec Class 2 Public Primary Certification Authority - G4\"\n       # Certificate \"Taiwan GRCA\"\n       # Certificate \"TC TrustCenter Class 3 CA II\"\n       # Certificate \"thawte Primary Root CA\"\n       # Certificate \"thawte Primary Root CA - G2\"\n       # Certificate \"thawte Primary Root CA - G3\"\n       # Certificate \"Trustis FPS Root CA\"\n       # Certificate \"TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5\"\n       # Certificate \"UTN USERFirst Email Root CA\"\n       # Certificate \"Verisign Class 3 Public Primary Certification Authority - G3\"\n       # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G4\"\n       # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G5\"\n       # Certificate \"VeriSign Universal Root Certification Authority\"\n       # Certificate \"Visa eCommerce Root\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-08-03T17:22:26Z","modified":"2026-06-04T09:47:06Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3","fixed_in":["2:3.35-2ubuntu2.16+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-dev","fixed_in":["2:3.35-2ubuntu2.16+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-tools","fixed_in":["2:3.35-2ubuntu2.16+tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.16+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.16+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.16+tuxcare.els1"}]}]}],"references":[{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1691083341","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2023-1691083341","title":"Update of alt-php","description":"\n   * Update ca-certificates database to 20230629:\n     - mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.62.\n     - The following certificate authorities were added:\n       # Certificate \"AC RAIZ FNMT-RCM SERVIDORES SEGUROS\"\n       # Certificate \"ANF Secure Server Root CA\"\n       # Certificate \"BJCA Global Root CA1\"\n       # Certificate \"BJCA Global Root CA2\"\n       # Certificate \"Certainly Root E1\"\n       # Certificate \"Certainly Root R1\"\n       # Certificate \"Certigna Root CA\"\n       # Certificate \"certSIGN Root CA G2\"\n       # Certificate \"Certum EC-384 CA\"\n       # Certificate \"Certum Trusted Root CA\"\n       # Certificate \"DigiCert SMIME ECC P384 Root G5\"\n       # Certificate \"DigiCert SMIME RSA4096 Root G5\"\n       # Certificate \"DigiCert TLS ECC P384 Root G5\"\n       # Certificate \"DigiCert TLS RSA4096 Root G5\"\n       # Certificate \"DIGITALSIGN GLOBAL ROOT ECDSA CA\"\n       # Certificate \"DIGITALSIGN GLOBAL ROOT RSA CA\"\n       # Certificate \"D-TRUST BR Root CA 1 2020\"\n       # Certificate \"D-TRUST EV Root CA 1 2020\"\n       # Certificate \"emSign ECC Root CA - C3\"\n       # Certificate \"emSign ECC Root CA - G3\"\n       # Certificate \"emSign Root CA - C1\"\n       # Certificate \"emSign Root CA - G1\"\n       # Certificate \"Entrust Root Certification Authority - G4\"\n       # Certificate \"e-Szigno Root CA 2017\"\n       # Certificate \"E-Tugra Global Root CA ECC v3\"\n       # Certificate \"E-Tugra Global Root CA RSA v3\"\n       # Certificate \"GlobalSign Root CA - R6\"\n       # Certificate \"GlobalSign Root E46\"\n       # Certificate \"GlobalSign Root R46\"\n       # Certificate \"GlobalSign Secure Mail Root E45\"\n       # Certificate \"GlobalSign Secure Mail Root R45\"\n       # Certificate \"GLOBALTRUST 2020\"\n       # Certificate \"GTS Root R1\"\n       # Certificate \"GTS Root R2\"\n       # Certificate \"GTS Root R3\"\n       # Certificate \"GTS Root R4\"\n       # Certificate \"HARICA Client ECC Root CA 2021\"\n       # Certificate \"HARICA Client RSA Root CA 2021\"\n       # Certificate \"HARICA TLS ECC Root CA 2021\"\n       # Certificate \"HARICA TLS RSA Root CA 2021\"\n       # Certificate \"HiPKI Root CA - G1\"\n       # Certificate \"Hongkong Post Root CA 3\"\n       # Certificate \"ISRG Root X2\"\n       # Certificate \"Microsoft ECC Root Certificate Authority 2017\"\n       # Certificate \"Microsoft RSA Root Certificate Authority 2017\"\n       # Certificate \"NAVER Global Root Certification Authority\"\n       # Certificate \"OISTE WISeKey Global Root GC CA\"\n       # Certificate \"Security Communication ECC RootCA1\"\n       # Certificate \"Security Communication RootCA3\"\n       # Certificate \"Telia Root CA v2\"\n       # Certificate \"Trustwave Global Certification Authority\"\n       # Certificate \"Trustwave Global ECC P256 Certification Authority\"\n       # Certificate \"Trustwave Global ECC P384 Certification Authority\"\n       # Certificate \"TunTrust Root CA\"\n       # Certificate \"UCA Extended Validation Root\"\n       # Certificate \"UCA Global G2 Root\"\n       # Certificate \"vTrus ECC Root CA\"\n       # Certificate \"vTrus Root CA\"\n       - The following certificate authorities were removed (-):\n       # Certificate \"AC Raiz Certicamara S.A.\"\n       # Certificate \"AddTrust External Root\"\n       # Certificate \"AddTrust Low-Value Services Root\"\n       # Certificate \"Camerfirma Global Chambersign Root\"\n       # Certificate \"Certinomis - Root CA\"\n       # Certificate \"Certplus Class 2 Primary CA\"\n       # Certificate \"Certplus Root CA G1\"\n       # Certificate \"Certplus Root CA G2\"\n       # Certificate \"ComSign CA\"\n       # Certificate \"Cybertrust Global Root\"\n       # Certificate \"Deutsche Telekom Root CA 2\"\n       # Certificate \"DST Root CA X3\"\n       # Certificate \"EC-ACC\"\n       # Certificate \"EE Certification Centre Root CA\"\n       # Certificate \"Explicitly Distrusted DigiNotar PKIoverheid G2\"\n       # Certificate \"GeoTrust Global CA\"\n       # Certificate \"GeoTrust Primary Certification Authority\"\n       # Certificate \"GeoTrust Primary Certification Authority - G2\"\n       # Certificate \"GeoTrust Primary Certification Authority - G3\"\n       # Certificate \"GeoTrust Universal CA\"\n       # Certificate \"GeoTrust Universal CA 2\"\n       # Certificate \"GlobalSign Root CA - R2\"\n       # Certificate \"Hellenic Academic and Research Institutions RootCA 2011\"\n       # Certificate \"LuxTrust Global Root 2\"\n       # Certificate \"Network Solutions Certificate Authority\"\n       # Certificate \"OpenTrust Root CA G1\"\n       # Certificate \"OpenTrust Root CA G2\"\n       # Certificate \"OpenTrust Root CA G3\"\n       # Certificate \"QuoVadis Root CA\"\n       # Certificate \"Sonera Class 2 Root CA\"\n       # Certificate \"Staat der Nederlanden EV Root CA\"\n       # Certificate \"Staat der Nederlanden Root CA - G2\"\n       # Certificate \"S-TRUST Universal Root CA\"\n       # Certificate \"Swisscom Root CA 2\"\n       # Certificate \"SwissSign Platinum CA - G2\"\n       # Certificate \"Symantec Class 1 Public Primary Certification Authority - G4\"\n       # Certificate \"Symantec Class 2 Public Primary Certification Authority - G4\"\n       # Certificate \"Taiwan GRCA\"\n       # Certificate \"TC TrustCenter Class 3 CA II\"\n       # Certificate \"thawte Primary Root CA\"\n       # Certificate \"thawte Primary Root CA - G2\"\n       # Certificate \"thawte Primary Root CA - G3\"\n       # Certificate \"Trustis FPS Root CA\"\n       # Certificate \"TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5\"\n       # Certificate \"UTN USERFirst Email Root CA\"\n       # Certificate \"Verisign Class 3 Public Primary Certification Authority - G3\"\n       # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G4\"\n       # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G5\"\n       # Certificate \"VeriSign Universal Root Certification Authority\"\n       # Certificate \"Visa eCommerce Root\"","status":"published","published":"2023-08-03T17:22:26Z","modified":"2026-06-04T09:47:06.143739255Z","updated_at":"2026-11-02T15:43:40.509998Z"}]}}