Skip to content
OpenAdvisories
Unscored USN-8947-1 0 CVEs

nss update

Published Oct 21, 2026 · Updated Oct 22, 2026

Summary

This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services
root" CA certificate due to intermediate CA certificates being compromised.

Fixed packages 8

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS nss 2:3.98-0ubuntu0.22.04.5
Ubuntu · 24.04 LTS 24.04:LTS nss 2:3.98-1ubuntu0.3
Ubuntu · 26.04 LTS 26.04:LTS nss 2:3.120-1ubuntu2.2
Ubuntu · 26.10 nss 2:3.127-1ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS nss 2:3.28.4-0ubuntu0.14.04.5+esm14
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS nss 2:3.28.4-0ubuntu0.16.04.14+esm6
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS nss 2:3.35-2ubuntu2.16+esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS nss 2:3.98-0ubuntu0.20.04.2+esm2

References

  • report
    https://bugs.launchpad.net/bugs/2171737