{"id":"CLSA-2025-1744312522","aliases":[],"status":"published","title":"Update of nss","description":"- Fix ecc DER wrapping.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-04-10T19:15:28Z","modified":"2026-06-01T00:30:39Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr","fixed_in":["4.35.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr-devel","fixed_in":["4.35.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-devel","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-pkcs11-devel","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-devel","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl-devel","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-sysinit","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-tools","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util-devel","fixed_in":["3.90.0-6.el9_2.tuxcare.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.35.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nspr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.35.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-6.el9_2.tuxcare.1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/almalinux9.2-fips/CLSA-2025-1744312522.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1744312522","title":"Update of nss","description":"- Fix ecc DER wrapping.","status":"published","published":"2025-04-10T19:15:28Z","modified":"2026-06-01T00:30:39.621284267Z","updated_at":"2026-11-02T15:43:41.66212Z"}]}}