{"id":"CLSA-2024-1708029694","aliases":[],"status":"published","title":"Update of nss","description":"- Update to CKBI 2.64 from NSS 3.95\n- Removed:\n-     # Certificate \"E-Tugra Certification Authority\"\n-     # Certificate \"Explicitly Distrusted DigiNotar PKIoverheid G2\"\n-     # Certificate \"Hongkong Post Root CA 1\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority - G6\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority - G6\"\n-     # Certificate \"TrustCor ECA-1\"\n-     # Certificate \"TrustCor RootCert CA-1\"\n-     # Certificate \"TrustCor RootCert CA-2\"\n-     # Certificate \"Verisign Class 1 Public Primary Certification Authority - G3\"\n-     # Certificate \"Verisign Class 2 Public Primary Certification Authority - G3\"\n- Added:\n-     # Certificate \"Atos TrustedRoot Root CA ECC G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA ECC TLS 2021\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA TLS 2021\"\n-     # Certificate \"CommScope Public Trust ECC Root-01\"\n-     # Certificate \"CommScope Public Trust ECC Root-02\"\n-     # Certificate \"CommScope Public Trust RSA Root-01\"\n-     # Certificate \"CommScope Public Trust RSA Root-02\"\n-     # Certificate \"LAWtrust Root CA2 (4096)\"\n-     # Certificate \"Sectigo Public Email Protection Root E46\"\n-     # Certificate \"Sectigo Public Email Protection Root R46\"\n-     # Certificate \"Sectigo Public Server Authentication Root E46\"\n-     # Certificate \"Sectigo Public Server Authentication Root R46\"\n-     # Certificate \"SSL.com Client ECC Root CA 2022\"\n-     # Certificate \"SSL.com Client RSA Root CA 2022\"\n-     # Certificate \"SSL.com TLS ECC Root CA 2022\"\n-     # Certificate \"SSL.com TLS RSA Root CA 2022\"\n-     # Certificate \"TrustAsia Global Root CA G3\"\n-     # Certificate \"TrustAsia Global Root CA G4\"\n- Updated test certificates","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-02-15T20:41:37Z","modified":"2026-06-01T00:30:09Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr","fixed_in":["4.35.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr-devel","fixed_in":["4.35.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-pkcs11-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-sysinit","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-tools","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.35.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.35.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1708029694.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2024-1708029694","title":"Update of nss","description":"- Update to CKBI 2.64 from NSS 3.95\n- Removed:\n-     # Certificate \"E-Tugra Certification Authority\"\n-     # Certificate \"Explicitly Distrusted DigiNotar PKIoverheid G2\"\n-     # Certificate \"Hongkong Post Root CA 1\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority - G6\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority - G6\"\n-     # Certificate \"TrustCor ECA-1\"\n-     # Certificate \"TrustCor RootCert CA-1\"\n-     # Certificate \"TrustCor RootCert CA-2\"\n-     # Certificate \"Verisign Class 1 Public Primary Certification Authority - G3\"\n-     # Certificate \"Verisign Class 2 Public Primary Certification Authority - G3\"\n- Added:\n-     # Certificate \"Atos TrustedRoot Root CA ECC G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA ECC TLS 2021\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA TLS 2021\"\n-     # Certificate \"CommScope Public Trust ECC Root-01\"\n-     # Certificate \"CommScope Public Trust ECC Root-02\"\n-     # Certificate \"CommScope Public Trust RSA Root-01\"\n-     # Certificate \"CommScope Public Trust RSA Root-02\"\n-     # Certificate \"LAWtrust Root CA2 (4096)\"\n-     # Certificate \"Sectigo Public Email Protection Root E46\"\n-     # Certificate \"Sectigo Public Email Protection Root R46\"\n-     # Certificate \"Sectigo Public Server Authentication Root E46\"\n-     # Certificate \"Sectigo Public Server Authentication Root R46\"\n-     # Certificate \"SSL.com Client ECC Root CA 2022\"\n-     # Certificate \"SSL.com Client RSA Root CA 2022\"\n-     # Certificate \"SSL.com TLS ECC Root CA 2022\"\n-     # Certificate \"SSL.com TLS RSA Root CA 2022\"\n-     # Certificate \"TrustAsia Global Root CA G3\"\n-     # Certificate \"TrustAsia Global Root CA G4\"\n- Updated test certificates","status":"published","published":"2024-02-15T20:41:37Z","modified":"2026-06-01T00:30:09.131309274Z","updated_at":"2026-11-02T15:43:40.88185Z"}]}}