QSN-8947-1: NSS update
2026-10-21

Summary:
The CA certificates in the nss package were updated.

Details:
This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services
root" CA certificate due to intermediate CA certificates being compromised.

Affected QuantaStor releases:
  6.9.1.001 jammy: libnss3 2:3.98-0ubuntu0.22.04.5 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.9.0.464 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.6.015 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.5.018 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.4.038 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.3.018 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.2.002 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.1.007 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)
  6.8.0.205 jammy: libnss3 2:3.98-0ubuntu0.22.04.4 (fixed in 2:3.98-0ubuntu0.22.04.5)

CVEs: 

References:
  https://ubuntu.com/security/notices/USN-8947-1
  https://bugs.launchpad.net/bugs/2171737