USN-8947-1: NSS update
Published Oct 21, 2026
·Updated
This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised.
Affected Software
25 affected componentsFixes available
Mozilla NSS
All of the following
ubuntu/libnss3<2:3.127-1ubuntu0.1
2:3.127-1ubuntu0.1
Ubuntu Ubuntu=26.10
All of the following
ubuntu/libnss3<2:3.120-1ubuntu2.2
2:3.120-1ubuntu2.2
Ubuntu Ubuntu=26.04
All of the following
ubuntu/libnss3<2:3.98-1ubuntu0.3
2:3.98-1ubuntu0.3
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libnss3<2:3.98-0ubuntu0.22.04.5
2:3.98-0ubuntu0.22.04.5
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libnss3<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libnss3<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libnss3<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libnss3-1d<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libnss3-nssdb<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libnss3<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/libnss3-1d<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/libnss3-nssdb<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.127-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.120-1ubuntu2.2 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.98-1ubuntu0.3 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in 2:3.98-0ubuntu0.22.04.5 - Upgrade
Upgrade
ubuntu/libnss3to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libnss3-1dto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libnss3-nssdbto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Oct 21, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software