{"id":"CLSA-2025-1754381492","aliases":[],"status":"published","title":"Update of nss","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- added certificates:\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-08-05T08:11:36Z","modified":"2026-06-01T00:33:26Z","fixes":[{"ecosystem":"TuxCare:OracleLinux:7","package":"nss","fixed_in":["3.90.0-2.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nss-devel","fixed_in":["3.90.0-2.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nss-pkcs11-devel","fixed_in":["3.90.0-2.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nss-sysinit","fixed_in":["3.90.0-2.el7_9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nss-tools","fixed_in":["3.90.0-2.el7_9.tuxcare.els3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-2.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-2.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-2.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-2.el7_9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.90.0-2.el7_9.tuxcare.els3"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1754381492.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1754381492","title":"Update of nss","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- added certificates:\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"","status":"published","published":"2025-08-05T08:11:36Z","modified":"2026-06-01T00:33:26.352940408Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}