[CLSA-2026:1793270669] Update of nss
Type:
bugfix
Severity:
None
Release date:
2026-10-29 10:44:37 UTC
Description:
* Update ca-certificates database to 20261028: - mozilla\{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: # Certificate "ACCVRAIZ1" # Certificate "Amazon Root CA 1" # Certificate "Amazon Root CA 2" # Certificate "Amazon Root CA 3" # Certificate "Amazon Root CA 4" # Certificate "OISTE WISeKey Global Root GC CA" - The following certificates were added: # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" # Certificate "GlobalSign Secure Mail Root R45" # Certificate "GlobalSign Secure Mail Root E45" # Certificate "GlobalSign Root R46" # Certificate "GlobalSign Root E46" # Certificate "ANF Secure Server Root CA" # Certificate "Certum EC-384 CA" # Certificate "Certum Trusted Root CA" # Certificate "TunTrust Root CA" # Certificate "HARICA TLS RSA Root CA 2021" # Certificate "HARICA TLS ECC Root CA 2021" # Certificate "HARICA Client RSA Root CA 2021" # Certificate "HARICA Client ECC Root CA 2021" # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" # Certificate "vTrus ECC Root CA" # Certificate "vTrus Root CA" # Certificate "ISRG Root X2" # Certificate "HiPKI Root CA - G1" # Certificate "GlobalSign ECC Root CA - R4" # Certificate "GTS Root R1" # Certificate "GTS Root R2" # Certificate "GTS Root R3" # Certificate "GTS Root R4" # Certificate "Telia Root CA v2" # Certificate "D-TRUST BR Root CA 1 2020" # Certificate "D-TRUST EV Root CA 1 2020" # Certificate "DigiCert TLS ECC P384 Root G5" # Certificate "DigiCert TLS RSA4096 Root G5" # Certificate "DigiCert SMIME ECC P384 Root G5" # Certificate "DigiCert SMIME RSA4096 Root G5" # Certificate "Certainly Root R1" # Certificate "Certainly Root E1" # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" # Certificate "Security Communication ECC RootCA1" # Certificate "BJCA Global Root CA1" # Certificate "BJCA Global Root CA2" # Certificate "LAWtrust Root CA2 (4096)" # Certificate "Sectigo Public Email Protection Root E46" # Certificate "Sectigo Public Email Protection Root R46" # Certificate "Sectigo Public Server Authentication Root E46" # Certificate "Sectigo Public Server Authentication Root R46" # Certificate "SSL.com TLS RSA Root CA 2022" # Certificate "SSL.com TLS ECC Root CA 2022" # Certificate "SSL.com Client ECC Root CA 2022" # Certificate "SSL.com Client RSA Root CA 2022" # Certificate "Atos TrustedRoot Root CA ECC G2 2020" # Certificate "Atos TrustedRoot Root CA RSA G2 2020" # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" # Certificate "TrustAsia Global Root CA G3" # Certificate "TrustAsia Global Root CA G4" # Certificate "D-Trust SBR Root CA 1 2022" # Certificate "D-Trust SBR Root CA 2 2022" # Certificate "Telekom Security SMIME ECC Root 2021" # Certificate "Telekom Security TLS ECC Root 2020" # Certificate "Telekom Security SMIME RSA Root 2023" # Certificate "Telekom Security TLS RSA Root 2023" # Certificate "TWCA CYBER Root CA" # Certificate "TWCA Global Root CA G2" # Certificate "SecureSign Root CA14" # Certificate "SecureSign Root CA15" # Certificate "D-TRUST BR Root CA 2 2023" # Certificate "TrustAsia SMIME ECC Root CA" # Certificate "TrustAsia SMIME RSA Root CA" # Certificate "TrustAsia TLS ECC Root CA" # Certificate "TrustAsia TLS RSA Root CA" # Certificate "D-TRUST EV Root CA 2 2023" # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" # Certificate "SwissSign RSA TLS Root CA 2022 - 1" # Certificate "OISTE Client Root ECC G1" # Certificate "OISTE Client Root RSA G1" # Certificate "OISTE Server Root ECC G1" # Certificate "OISTE Server Root RSA G1" # Certificate "e-Szigno TLS Root CA 2023" # Certificate "SecureSign Root CA16" # Certificate "SECOM TLS RSA Root CA 2024" # Certificate "SECOM TLS ECC Root CA 2024" # Certificate "SECOM SMIME RSA Root CA 2024" # Certificate "Telia EC Email Root CA v3" # Certificate "Telia EC TLS Root CA v3" # Certificate "Telia RSA Email Root CA v3" # Certificate "Telia RSA TLS Root CA v3" - The following certificates were removed: # Certificate "GlobalSign Root CA - R2" # Certificate "Baltimore CyberTrust Root" # Certificate "QuoVadis Root CA" # Certificate "Security Communication Root CA" # Certificate "Sonera Class 2 Root CA" # Certificate "Camerfirma Chambers of Commerce Root" # Certificate "Camerfirma Global Chambersign Root" # Certificate "DST Root CA X3" # Certificate "Cybertrust Global Root" # Certificate "Hongkong Post Root CA 1" # Certificate "Chambers of Commerce Root - 2008" # Certificate "Global Chambersign Root - 2008" # Certificate "Trustis FPS Root CA" # Certificate "E-Tugra Certification Authority" # Certificate "Staat der Nederlanden EV Root CA" # Certificate "TrustCor RootCert CA-1" # Certificate "TrustCor RootCert CA-2" # Certificate "TrustCor ECA-1" # Certificate "GeoTrust Primary Certification Authority - G2" # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" # Certificate "VeriSign Universal Root Certification Authority" # Certificate "emSign ECC Root CA - C3" # Certificate "emSign ECC Root CA - G3" # Certificate "emSign Root CA - C1" - The following certificates were replaced by their re-issued copies: # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" # Certificate "GlobalSign ECC Root CA - R4" # Certificate "GTS Root R1" # Certificate "GTS Root R2" # Certificate "GTS Root R3" # Certificate "GTS Root R4" - The following certificates were distrusted: # Certificate "AffirmTrust Commercial" # Certificate "AffirmTrust Networking" # Certificate "AffirmTrust Premium" # Certificate "AffirmTrust Premium ECC" # Certificate "EC-ACC" # Certificate "Entrust Root Certification Authority" # Certificate "Hellenic Academic and Research Institutions RootCA 2011" # Certificate "Network Solutions Certificate Authority" # Certificate "Secure Global CA" # Certificate "SecureSign RootCA11" # Certificate "SecureTrust CA" # Certificate "SwissSign Platinum CA - G2" # Certificate "SwissSign Silver CA - G2" # Certificate "TeliaSonera Root CA v1" # Certificate "XRamp Global CA Root" # Certificate "certSIGN ROOT CA" # Certificate "ePKI Root Certification Authority" - The following certificates are no longer trusted for TLS server authentication: # Certificate "GlobalSign Root CA" # Certificate "Entrust.net Premium 2048 Secure Server CA" # Certificate "Comodo AAA Services root" # Certificate "QuoVadis Root CA 2" # Certificate "QuoVadis Root CA 3" # Certificate "Go Daddy Class 2 CA" # Certificate "Starfield Class 2 CA" # Certificate "DigiCert Assured ID Root CA" # Certificate "DigiCert Global Root CA" # Certificate "DigiCert High Assurance EV Root CA" # Certificate "SwissSign Gold CA - G2" # Certificate "COMODO Certification Authority" # Certificate "Certigna" # Certificate "Atos TrustedRoot 2011" # Certificate "Staat der Nederlanden Root CA - G3" # Certificate "Entrust Root Certification Authority - G2" # Certificate "Entrust Root Certification Authority - EC1" # Certificate "Entrust Root Certification Authority - G4" - The following certificates got a new distrust-after date: # Certificate "Entrust.net Premium 2048 Secure Server CA" # Certificate "Izenpe.com" # Certificate "Entrust Root Certification Authority - G2" # Certificate "Entrust Root Certification Authority - EC1" - The following certificates, kept after Mozilla removed them, are no longer marked as part of its CA program: # Certificate "Entrust Root Certification Authority" # Certificate "XRamp Global CA Root" # Certificate "SwissSign Platinum CA - G2" # Certificate "SwissSign Silver CA - G2" # Certificate "SecureTrust CA" # Certificate "Secure Global CA" # Certificate "Network Solutions Certificate Authority" # Certificate "ePKI Root Certification Authority" # Certificate "certSIGN ROOT CA" # Certificate "SecureSign RootCA11" # Certificate "AffirmTrust Commercial" # Certificate "AffirmTrust Networking" # Certificate "AffirmTrust Premium" # Certificate "AffirmTrust Premium ECC" # Certificate "EC-ACC" # Certificate "Hellenic Academic and Research Institutions RootCA 2011" # Certificate "TeliaSonera Root CA v1" # Certificate "Trustwave Global Certification Authority" # Certificate "Trustwave Global ECC P256 Certification Authority" # Certificate "Trustwave Global ECC P384 Certification Authority"
Updated packages:
  • libnss3_3.61-1+deb11u7+tuxcare.els1_amd64.deb
    sha:a76d465a39f7fdd79f0a61221917de5afaf77e4e
  • libnss3-dev_3.61-1+deb11u7+tuxcare.els1_amd64.deb
    sha:98eeebfa95ddc300aff498d24c290214aa44fb0a
  • libnss3-tools_3.61-1+deb11u7+tuxcare.els1_amd64.deb
    sha:176017f323858040ca4c9a0f4e86e1d15aabbad3
  • libnss3_3.61-1+deb11u7+tuxcare.els1_arm64.deb
    sha:35f3a5404be87a446527f2596f0d83d4d1c6c85c
  • libnss3-dev_3.61-1+deb11u7+tuxcare.els1_arm64.deb
    sha:e139d923a77b4dd932ae632c4b1cdbff0a189667
  • libnss3-tools_3.61-1+deb11u7+tuxcare.els1_arm64.deb
    sha:868aae8aca58df55143be55b9714ce0cda40465b
  • libnss3_3.61-1+deb11u7+tuxcare.els1_armel.deb
    sha:f0ebc979aa95158e5b27c50ec11eda31440678c1
  • libnss3-dev_3.61-1+deb11u7+tuxcare.els1_armel.deb
    sha:478e1147049c1f26fcde32b6cf034e6d9798448a
  • libnss3-tools_3.61-1+deb11u7+tuxcare.els1_armel.deb
    sha:c784e900d2a1565b9f2ebae59d002a9166e45f3d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.