{"id":"CLSA-2025-1754337533","aliases":[],"status":"published","title":"Update of nss","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- added certificates:\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-08-04T19:58:56Z","modified":"2026-06-01T00:33:23Z","fixes":[{"ecosystem":"TuxCare:CentOS:8.5","package":"nss","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-devel","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-pkcs11-devel","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn-devel","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn-freebl","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn-freebl-devel","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-sysinit","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-tools","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-util","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"nss-util-devel","fixed_in":["3.67.0-7.el8_5.tuxcare.els7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn-freebl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-softokn-freebl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"nss-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.67.0-7.el8_5.tuxcare.els7"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1754337533.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1754337533","title":"Update of nss","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- added certificates:\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"","status":"published","published":"2025-08-04T19:58:56Z","modified":"2026-06-01T00:33:23.068696742Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}