Red Hat Security Advisory: nss security update
Affects Red Hat nssSource GCVE Database
Rated by Threat Radar
Data as of 13 Nov 2026, 18:37 UTC
What to do
AI-suggested
Users should upgrade to the updated NSS packages provided by Red Hat that address this issue. After applying the update, all applications using NSS must be restarted for the changes to take effect. No additional actions are specified or required beyond upgrading and restarting.
Description
A security update for Network Security Services (NSS) addresses the issue of a Certificate Authority (CA) that issued fraudulent HTTPS certificates. The update causes any HTTPS certificates signed by that CA to be treated as untrusted, affecting SSL, S/MIME, and code signing. This fix applies only to applications using the NSS Builtin Object Token. Applications using NSS but not the Builtin Object Token are not affected. Users must upgrade NSS packages and restart applications for the update to take effect.