{"id":"CLSA-2024-1731001050","aliases":[],"status":"published","title":"Update of nss","description":"- update to CKBI 2.70 from NSS 3.104\n- updated certificates:\n-     # Certificate \"GLOBALTRUST 2020\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"OISTE WISeKey Global Root GC CA\"\n- removed certificates:\n-     # Certificate \"Security Communication Root CA\"\n-     # Certificate \"Camerfirma Chambers of Commerce Root\"\n-     # Certificate \"Chambers of Commerce Root - 2008\"\n-     # Certificate \"Global Chambersign Root - 2008\"\n- added certificates:\n-     # Certificate \"D-Trust SBR Root CA 1 2022\"\n-     # Certificate \"D-Trust SBR Root CA 2 2022\"\n-     # Certificate \"Telekom Security SMIME ECC Root 2021\"\n-     # Certificate \"Telekom Security TLS ECC Root 2020\"\n-     # Certificate \"Telekom Security SMIME RSA Root 2023\"\n-     # Certificate \"Telekom Security TLS RSA Root 2023\"\n-     # Certificate \"FIRMAPROFESIONAL CA ROOT-A WEB\"\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-11-07T17:37:35Z","modified":"2026-06-01T00:30:23Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr","fixed_in":["4.35.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr-devel","fixed_in":["4.35.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-pkcs11-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-sysinit","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-tools","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util-devel","fixed_in":["3.90.0-3.el9_2.tuxcare.els5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.35.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.35.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-3.el9_2.tuxcare.els5"}]}]}],"references":[{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1731001050.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2024-1731001050","title":"Update of nss","description":"- update to CKBI 2.70 from NSS 3.104\n- updated certificates:\n-     # Certificate \"GLOBALTRUST 2020\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"OISTE WISeKey Global Root GC CA\"\n- removed certificates:\n-     # Certificate \"Security Communication Root CA\"\n-     # Certificate \"Camerfirma Chambers of Commerce Root\"\n-     # Certificate \"Chambers of Commerce Root - 2008\"\n-     # Certificate \"Global Chambersign Root - 2008\"\n- added certificates:\n-     # Certificate \"D-Trust SBR Root CA 1 2022\"\n-     # Certificate \"D-Trust SBR Root CA 2 2022\"\n-     # Certificate \"Telekom Security SMIME ECC Root 2021\"\n-     # Certificate \"Telekom Security TLS ECC Root 2020\"\n-     # Certificate \"Telekom Security SMIME RSA Root 2023\"\n-     # Certificate \"Telekom Security TLS RSA Root 2023\"\n-     # Certificate \"FIRMAPROFESIONAL CA ROOT-A WEB\"\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"","status":"published","published":"2024-11-07T17:37:35Z","modified":"2026-06-01T00:30:23.564494366Z","updated_at":"2026-11-02T15:43:41.281406Z"}]}}