{"id":"CLSA-2024-1707379599","aliases":[],"status":"published","title":"Update of alt-php","description":"* Update ca-certificates database to 20231207:\n     - mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.64.\n     - The following certificates authorities were added:\n       # Certificate \"Atos TrustedRoot Root CA ECC G2 2020\"\n       # Certificate \"Atos TrustedRoot Root CA ECC TLS 2021\"\n       # Certificate \"Atos TrustedRoot Root CA RSA G2 2020\"\n       # Certificate \"Atos TrustedRoot Root CA RSA TLS 2021\"\n       # Certificate \"CommScope Public Trust ECC Root-01\"\n       # Certificate \"CommScope Public Trust ECC Root-02\"\n       # Certificate \"CommScope Public Trust RSA Root-01\"\n       # Certificate \"CommScope Public Trust RSA Root-02\"\n       # Certificate \"LAWtrust Root CA2 (4096)\"\n       # Certificate \"Sectigo Public Email Protection Root E46\"\n       # Certificate \"Sectigo Public Email Protection Root R46\"\n       # Certificate \"Sectigo Public Server Authentication Root E46\"\n       # Certificate \"Sectigo Public Server Authentication Root R46\"\n       # Certificate \"SSL.com Client ECC Root CA 2022\"\n       # Certificate \"SSL.com Client RSA Root CA 2022\"\n       # Certificate \"SSL.com TLS ECC Root CA 2022\"\n       # Certificate \"SSL.com TLS RSA Root CA 2022\"\n       # Certificate \"TrustAsia Global Root CA G3\"\n       # Certificate \"TrustAsia Global Root CA G4\"\n     - The following certificates were removed:\n       # Certificate \"E-Tugra Certification Authority\"\n       # Certificate \"Hongkong Post Root CA 1\"\n       # Certificate \"Symantec Class 1 Public Primary Certification Authority - G6\"\n       # Certificate \"Symantec Class 2 Public Primary Certification Authority - G6\"\n       # Certificate \"TrustCor ECA-1\"\n       # Certificate \"TrustCor RootCert CA-1\"\n       # Certificate \"TrustCor RootCert CA-2\"\n       # Certificate \"Verisign Class 1 Public Primary Certification Authority - G3\"\n       # Certificate \"Verisign Class 2 Public Primary Certification Authority - G3\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-02-08T08:06:41Z","modified":"2026-06-04T09:47:23Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3","fixed_in":["2:3.35-2ubuntu2.16+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-dev","fixed_in":["2:3.35-2ubuntu2.16+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-tools","fixed_in":["2:3.35-2ubuntu2.16+tuxcare.els2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.16+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.16+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss3-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.35-2ubuntu2.16+tuxcare.els2"}]}]}],"references":[{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1707379599.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2024-1707379599","title":"Update of alt-php","description":"   * Update ca-certificates database to 20231207:\n     - mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.64.\n     - The following certificates authorities were added:\n       # Certificate \"Atos TrustedRoot Root CA ECC G2 2020\"\n       # Certificate \"Atos TrustedRoot Root CA ECC TLS 2021\"\n       # Certificate \"Atos TrustedRoot Root CA RSA G2 2020\"\n       # Certificate \"Atos TrustedRoot Root CA RSA TLS 2021\"\n       # Certificate \"CommScope Public Trust ECC Root-01\"\n       # Certificate \"CommScope Public Trust ECC Root-02\"\n       # Certificate \"CommScope Public Trust RSA Root-01\"\n       # Certificate \"CommScope Public Trust RSA Root-02\"\n       # Certificate \"LAWtrust Root CA2 (4096)\"\n       # Certificate \"Sectigo Public Email Protection Root E46\"\n       # Certificate \"Sectigo Public Email Protection Root R46\"\n       # Certificate \"Sectigo Public Server Authentication Root E46\"\n       # Certificate \"Sectigo Public Server Authentication Root R46\"\n       # Certificate \"SSL.com Client ECC Root CA 2022\"\n       # Certificate \"SSL.com Client RSA Root CA 2022\"\n       # Certificate \"SSL.com TLS ECC Root CA 2022\"\n       # Certificate \"SSL.com TLS RSA Root CA 2022\"\n       # Certificate \"TrustAsia Global Root CA G3\"\n       # Certificate \"TrustAsia Global Root CA G4\"\n     - The following certificates were removed:\n       # Certificate \"E-Tugra Certification Authority\"\n       # Certificate \"Hongkong Post Root CA 1\"\n       # Certificate \"Symantec Class 1 Public Primary Certification Authority - G6\"\n       # Certificate \"Symantec Class 2 Public Primary Certification Authority - G6\"\n       # Certificate \"TrustCor ECA-1\"\n       # Certificate \"TrustCor RootCert CA-1\"\n       # Certificate \"TrustCor RootCert CA-2\"\n       # Certificate \"Verisign Class 1 Public Primary Certification Authority - G3\"\n       # Certificate \"Verisign Class 2 Public Primary Certification Authority - G3\"","status":"published","published":"2024-02-08T08:06:41Z","modified":"2026-06-04T09:47:23.479840759Z","updated_at":"2026-11-02T15:43:40.88185Z"}]}}