{"id":"CLSA-2025-1754382436","aliases":[],"status":"published","title":"Update of nss","description":"* Update ca-certificates database to 20250418:\n     - mozilla\\{certdata.h,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.74.\n     - The following certificates were updated:\n       # Certificate \"Entrust Root Certification Authority - G4\"\n       # Certificate \"Security Communication ECC RootCA1\"\n       # Certificate \"BJCA Global Root CA1\"\n       # Certificate \"BJCA Global Root CA2\"\n     - The following certificates were added:\n       # Certificate \"D-TRUST BR Root CA 2 2023\"\n       # Certificate \"D-TRUST EV Root CA 2 2023\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-08-05T08:27:20Z","modified":"2026-10-26T09:32:00Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3","fixed_in":["2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-1d","fixed_in":["2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-dev","fixed_in":["2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-nssdb","fixed_in":["2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-tools","fixed_in":["2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-nssdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss3-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.28.4-0ubuntu0.16.04.14+tuxcare.els9"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1754382436.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1754382436","title":"Update of nss","description":"   * Update ca-certificates database to 20250418:\n     - mozilla\\{certdata.h,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.74.\n     - The following certificates were updated:\n       # Certificate \"Entrust Root Certification Authority - G4\"\n       # Certificate \"Security Communication ECC RootCA1\"\n       # Certificate \"BJCA Global Root CA1\"\n       # Certificate \"BJCA Global Root CA2\"\n     - The following certificates were added:\n       # Certificate \"D-TRUST BR Root CA 2 2023\"\n       # Certificate \"D-TRUST EV Root CA 2 2023\"","status":"published","published":"2025-08-05T08:27:20Z","modified":"2026-10-26T09:32:00.798766215Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}
