[Bugtraq] [SECURITY] [DSA 6599-1] nss security update
Salvatore Bonaccorso · · Bugtraq
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6599-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : nss It was discovered that several eMudhra intermediate CA certificates have been compromised. Updated nss packages are provided to remove the "eMudhra emSign Root CA - G3", "eMudhra emSign Root CA - C1" and "emSign ECC Root CA - C3" certificates. For the stable distribution (trixie), this problem has been fixed in version 2:3.110-1+deb13u5. We recommend that you upgrade your nss packages. For the detailed security status of nss please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nss Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmrmTJxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QdVBAAiODd9hZKkYUYtdUiiHIYQeqF4USt7Y5i+36T3qAEaZpKPIziubcYqueD wglG/teEhk3TZeZ2NwfDYNfjXBUR8BuH4RAs61IMLTTnWP2gCu2AM9TbXlEmZXkC NSrw5eEgAsMZ4Ola/Q3LMFKnsbMSrYUn07HNvB7xnoWevYMAhn6Gk+hCnw+ukSVV I9tYVKpgFfeZ8wzb9RTGyBnhlIQOuKPQFJTkkFlmEdHN59GWF8S6McZTru/+Rxj+ GGaK+QOaU+2f7FpDRb2tYrH8Q/mTz5k2dX0cPAhxngMtiD7Fl+IfItOLXp40pcsz TzLOCJ/l6KB2bAlbZ2yyW/Ur/AOZFxgQTrR9VcLh3kbLxO/xW6bOeAolsOHxOb2G M9Lp/s6GhPbVuA5rtIonzljxNPFP7LQ0PEkQjwbs8IxnTxxuVyLHsMKCtK31LF/d 1B8pdxx/ARoZ929fDEnzBnSKQFjw93WHDPelXFIVpS+VfPNAzCS/zh7MVWO0eTzT rr8q36ylOjOYMhIe6MdDqop0fnb2ctXQ7ElJokZLi4hygIdxz7nj3UCQ3wKtjUGU Ki9zpWPTlD22iC7fI7y0lP20hMu8sX8U9JAtM2ItPe1ziwuNwSR1Jk233Vr+hDgQ smyN2SWB6w+n9AR9m5TrqKp7m72pM4icTXdl6hBjQShpmdF8g14= =Tdgu -----END PGP SIGNATURE-----