Skip to main content

Boteraser | Website and Server Security Solutions

🛡️ CLSA-2026-1771112524 — libnss3

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Update of alt-php

  • Update ca-certificates database to 20260129:
  • mozilla\{certdata.h,nssckbi.h}: Update Mozilla certificate

authority bundle of the version 2.82.

  • The following certificates were updated:

# Certificate "GlobalSign Root CA"

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Comodo AAA Services root"

# Certificate "XRamp Global CA Root"

# Certificate "Go Daddy Class 2 CA"

# Certificate "Starfield Class 2 CA"

# Certificate "OISTE WISeKey Global Root GA CA"

# Certificate "certSIGN ROOT CA"

# Certificate "ACCVRAIZ1"

# Certificate "Staat der Nederlanden Root CA - G3"

# Certificate "OISTE WISeKey Global Root GC CA"

  • The following certificates were added:

# Certificate "emSign Root CA - G1"

# Certificate "emSign ECC Root CA - G3"

# Certificate "emSign Root CA - C1"

# Certificate "emSign ECC Root CA - C3"

# Certificate "Hongkong Post Root CA 3"

# Certificate "Entrust Root Certification Authority - G4"

# Certificate "Microsoft ECC Root Certificate Authority 2017"

# Certificate "Microsoft RSA Root Certificate Authority 2017"

# Certificate "e-Szigno Root CA 2017"

# Certificate "certSIGN Root CA G2"

# Certificate "Trustwave Global Certification Authority"

# Certificate "Trustwave Global ECC P256 Certification Authority"

# Certificate "Trustwave Global ECC P384 Certification Authority"

# Certificate "NAVER Global Root Certification Authority"

# Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"

# Certificate "GlobalSign Secure Mail Root R45"

# Certificate "GlobalSign Secure Mail Root E45"

# Certificate "GlobalSign Root R46"

# Certificate "GlobalSign Root E46"

# Certificate "GLOBALTRUST 2020"

# Certificate "ANF Secure Server Root CA"

# Certificate "Certum EC-384 CA"

# Certificate "Certum Trusted Root CA"

# Certificate "TunTrust Root CA"

# Certificate "HARICA TLS RSA Root CA 2021"

# Certificate "HARICA TLS ECC Root CA 2021"

# Certificate "HARICA Client RSA Root CA 2021"

# Certificate "HARICA Client ECC Root CA 2021"

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

# Certificate "vTrus ECC Root CA"

# Certificate "vTrus Root CA"

# Certificate "ISRG Root X2"

# Certificate "HiPKI Root CA - G1"

# Certificate "GlobalSign ECC Root CA - R4"

# Certificate "GTS Root R1"

# Certificate "GTS Root R2"

# Certificate "GTS Root R3"

# Certificate "GTS Root R4"

# Certificate "Telia Root CA v2"

# Certificate "D-TRUST BR Root CA 1 2020"

# Certificate "D-TRUST EV Root CA 1 2020"

# Certificate "DigiCert TLS ECC P384 Root G5"

# Certificate "DigiCert TLS RSA4096 Root G5"

# Certificate "DigiCert SMIME ECC P384 Root G5"

# Certificate "DigiCert SMIME RSA4096 Root G5"

# Certificate "Certainly Root R1"

# Certificate "Certainly Root E1"

# Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"

# Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"

# Certificate "Security Communication ECC RootCA1"

# Certificate "BJCA Global Root CA1"

# Certificate "BJCA Global Root CA2"

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

# Certificate "TWCA CYBER Root CA"

# Certificate "TWCA Global Root CA G2"

# Certificate "SecureSign Root CA12"

# Certificate "SecureSign Root CA14"

# Certificate "SecureSign Root CA15"

# Certificate "D-TRUST BR Root CA 2 2023"

# Certificate "TrustAsia SMIME ECC Root CA"

# Certificate "TrustAs

Affected software

CLSA-2026-1771112524 is recorded against 3 packages.

  • libnss3 (fixed in 2:3.42.1-1+deb10u8+tuxcare.els1)
  • libnss3-dev (fixed in 2:3.42.1-1+deb10u8+tuxcare.els1)
  • libnss3-tools (fixed in 2:3.42.1-1+deb10u8+tuxcare.els1)

Timeline and source

Published on 14 February 2026 and last revised on 4 June 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

errata.tuxcare.com (Advisory)

Other advisories for this package

libnss3 has other advisories on record. If you are patching this one, these are worth checking on the same host:

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2026-02-14
Updated 2026-08-20
Modified 2026-06-04
Fix URL N/A

Affected Packages

Software From version Fixed in
libnss3 — 2:3.42.1-1+deb10u8+tuxcare.els1
libnss3-dev — 2:3.42.1-1+deb10u8+tuxcare.els1
libnss3-tools — 2:3.42.1-1+deb10u8+tuxcare.els1

Free Vulnerability Check

Is your site affected by CLSA-2026-1771112524?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CLSA-2026-1771112524 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Browse related advisories

All advisoriesChainguardChainguard 2026
✓