CLSA-2024-1707379486

    Dashboard / Vulnerabilities / CLSA-2024-1707379486

    CLSA-2024-1707379486

    Published: 8 Feb 2024Last Modified: 4 Jun 2026

    Summary: Update of alt-php

    Details: * Update ca-certificates database to 20231207: - mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.64. - The following certificates authorities were added: # Certificate "Atos TrustedRoot Root CA ECC G2 2020" # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" # Certificate "Atos TrustedRoot Root CA RSA G2 2020" # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" # Certificate "CommScope Public Trust ECC Root-01" # Certificate "CommScope Public Trust ECC Root-02" # Certificate "CommScope Public Trust RSA Root-01" # Certificate "CommScope Public Trust RSA Root-02" # Certificate "LAWtrust Root CA2 (4096)" # Certificate "Sectigo Public Email Protection Root E46" # Certificate "Sectigo Public Email Protection Root R46" # Certificate "Sectigo Public Server Authentication Root E46" # Certificate "Sectigo Public Server Authentication Root R46" # Certificate "SSL.com Client ECC Root CA 2022" # Certificate "SSL.com Client RSA Root CA 2022" # Certificate "SSL.com TLS ECC Root CA 2022" # Certificate "SSL.com TLS RSA Root CA 2022" # Certificate "TrustAsia Global Root CA G3" # Certificate "TrustAsia Global Root CA G4" - The following certificates were removed: # Certificate "E-Tugra Certification Authority" # Certificate "Hongkong Post Root CA 1" # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" # Certificate "TrustCor ECA-1" # Certificate "TrustCor RootCert CA-1" # Certificate "TrustCor RootCert CA-2" # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"

    References: https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1707379486.html

    Affected packages

    Package

    Name: libnss3

    Purl: pkg:deb/tuxcare/libnss3?distro=ubuntu-16.04

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2:3.28.4-0ubuntu0.16.04.14+tuxcare.els7

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CLSA-2024-1707379486 | CVE-DB