{"id":"CLSA-2026-1774279106","aliases":[],"status":"published","title":"Update of nss","description":"* Update ca-certificates database to 20260303:\n     - mozilla\\{certdata.h,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.84.\n     - The following certificates were updated:\n       # Certificate \"GlobalSign Root CA\"\n       # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n       # Certificate \"Comodo AAA Services root\"\n       # Certificate \"XRamp Global CA Root\"\n       # Certificate \"Go Daddy Class 2 CA\"\n       # Certificate \"Starfield Class 2 CA\"\n     - The following certificates were added:\n       # Certificate \"TrustAsia SMIME ECC Root CA\"\n       # Certificate \"TrustAsia SMIME RSA Root CA\"\n       # Certificate \"TrustAsia TLS ECC Root CA\"\n       # Certificate \"TrustAsia TLS RSA Root CA\"\n       # Certificate \"SwissSign RSA SMIME Root CA 2022 - 1\"\n       # Certificate \"SwissSign RSA TLS Root CA 2022 - 1\"\n       # Certificate \"OISTE Client Root ECC G1\"\n       # Certificate \"OISTE Client Root RSA G1\"\n       # Certificate \"OISTE Server Root ECC G1\"\n       # Certificate \"OISTE Server Root RSA G1\"\n       # Certificate \"e-Szigno TLS Root CA 2023\"\n     - The following certificates were removed:\n       # Certificate \"Baltimore CyberTrust Root\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-03-23T15:18:31Z","modified":"2026-10-26T09:32:04Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss3","fixed_in":["2:3.98-0ubuntu0.20.04.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss3-dev","fixed_in":["2:3.98-0ubuntu0.20.04.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss3-tools","fixed_in":["2:3.98-0ubuntu0.20.04.2+tuxcare.els2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-0ubuntu0.20.04.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss3-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-0ubuntu0.20.04.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss3-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-0ubuntu0.20.04.2+tuxcare.els2"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1774279106.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1774279106","title":"Update of nss","description":"   * Update ca-certificates database to 20260303:\n     - mozilla\\{certdata.h,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.84.\n     - The following certificates were updated:\n       # Certificate \"GlobalSign Root CA\"\n       # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n       # Certificate \"Comodo AAA Services root\"\n       # Certificate \"XRamp Global CA Root\"\n       # Certificate \"Go Daddy Class 2 CA\"\n       # Certificate \"Starfield Class 2 CA\"\n     - The following certificates were added:\n       # Certificate \"TrustAsia SMIME ECC Root CA\"\n       # Certificate \"TrustAsia SMIME RSA Root CA\"\n       # Certificate \"TrustAsia TLS ECC Root CA\"\n       # Certificate \"TrustAsia TLS RSA Root CA\"\n       # Certificate \"SwissSign RSA SMIME Root CA 2022 - 1\"\n       # Certificate \"SwissSign RSA TLS Root CA 2022 - 1\"\n       # Certificate \"OISTE Client Root ECC G1\"\n       # Certificate \"OISTE Client Root RSA G1\"\n       # Certificate \"OISTE Server Root ECC G1\"\n       # Certificate \"OISTE Server Root RSA G1\"\n       # Certificate \"e-Szigno TLS Root CA 2023\"\n     - The following certificates were removed:\n       # Certificate \"Baltimore CyberTrust Root\"","status":"published","published":"2026-03-23T15:18:31Z","modified":"2026-10-26T09:32:04.931329969Z","updated_at":"2026-11-02T15:43:43.621843Z"}]}}