{"id":"CLSA-2025-1754680650","aliases":[],"status":"published","title":"Update of nss","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- added certificates:\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-08-08T19:17:33Z","modified":"2026-06-01T00:33:16Z","fixes":[{"ecosystem":"TuxCare:CentOS:6","package":"nss","fixed_in":["3.44.0-12.el6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nss-devel","fixed_in":["3.44.0-12.el6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nss-pkcs11-devel","fixed_in":["3.44.0-12.el6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nss-sysinit","fixed_in":["3.44.0-12.el6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"nss-tools","fixed_in":["3.44.0-12.el6.tuxcare.els7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nss-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nss-sysinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"nss-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.44.0-12.el6.tuxcare.els7"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1754680650.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1754680650","title":"Update of nss","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- added certificates:\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"","status":"published","published":"2025-08-08T19:17:33Z","modified":"2026-06-01T00:33:16.725832395Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}