Same for Ubuntu Focal: ```console vagrant@ubuntu2004:~/Downloads$ wget -q https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3_3.98-0ubuntu0.20.04.2_amd64.deb vagrant@ubuntu2004:~/Downloads$ wget -q https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+files/libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb vagrant@ubuntu2004:~/Downloads$ ls -lah libnss*.deb -rw-rw---- 1 vagrant vagrant 1.4M Apr 11 15:22 libnss3_3.98-0ubuntu0.20.04.2_amd64.deb -rw-rw---- 1 vagrant vagrant 1.1M Apr 11 15:22 libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb vagrant@ubuntu2004:~/Downloads$ LC_ALL=C apt-cache policy libnss3 libnss3-tools libnss3: Installed: 2:3.49.1-1ubuntu1 Candidate: 2:3.98-0ubuntu0.20.04.1 Version table: 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages *** 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages 100 /var/lib/dpkg/status libnss3-tools: Installed: 2:3.49.1-1ubuntu1 Candidate: 2:3.98-0ubuntu0.20.04.1 Version table: 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages *** 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/universe amd64 Packages 100 /var/lib/dpkg/status vagrant@ubuntu2004:~/Downloads$ LC_ALL=C sudo apt-mark unhold libnss3 libnss3-tools Canceled hold on libnss3. Canceled hold on libnss3-tools. vagrant@ubuntu2004:~/Downloads$ LC_ALL=C sudo apt install --yes ./libnss3*.deb Reading package lists... Done Building dependency tree Reading state information... Done Note, selecting 'libnss3' instead of './libnss3_3.98-0ubuntu0.20.04.2_amd64.deb' Note, selecting 'libnss3-tools' instead of './libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb' The following packages will be upgraded: libnss3 libnss3-tools 2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/2446 kB of archives. After this operation, 811 kB of additional disk space will be used. Get:1 /home/vagrant/Downloads/libnss3_3.98-0ubuntu0.20.04.2_amd64.deb libnss3 amd64 2:3.98-0ubuntu0.20.04.2 [1391 kB] Get:2 /home/vagrant/Downloads/libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb libnss3-tools amd64 2:3.98-0ubuntu0.20.04.2 [1055 kB] (Reading database ... 212155 files and directories currently installed.) Preparing to unpack .../libnss3_3.98-0ubuntu0.20.04.2_amd64.deb ... Unpacking libnss3:amd64 (2:3.98-0ubuntu0.20.04.2) over (2:3.49.1-1ubuntu1) ... Preparing to unpack .../libnss3-tools_3.98-0ubuntu0.20.04.2_amd64.deb ... Unpacking libnss3-tools (2:3.98-0ubuntu0.20.04.2) over (2:3.49.1-1ubuntu1) ... Setting up libnss3:amd64 (2:3.98-0ubuntu0.20.04.2) ... Setting up libnss3-tools (2:3.98-0ubuntu0.20.04.2) ... Processing triggers for man-db (2.9.1-1) ... Processing triggers for libc-bin (2.31-0ubuntu9.14) ... N: Download is performed unsandboxed as root as file '/home/vagrant/Downloads/libnss3_3.98-0ubuntu0.20.04.2_amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) vagrant@ubuntu2004:~/Downloads$ cd ~/.pki/nssdb/ vagrant@ubuntu2004:~/.pki/nssdb$ cat pkcs11.txt library= name=NSS Internal PKCS #11 Module parameters=configdir='sql:/home/vagrant/.pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' NSS=Flags=internal,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30}) library=/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so name=OpenSC smartcard framework (0.22) library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so name=PKCS #11 Trust Storage Module NSS=trustOrder=100 vagrant@ubuntu2004:~/.pki/nssdb$ modutil -dbdir . -delete "OpenSC smartcard framework (0.22)" -force Module "OpenSC smartcard framework (0.22)" deleted from database. vagrant@ubuntu2004:~/.pki/nssdb$ modutil -dbdir . -add "OpenSC smartcard framework (0.22)" -force -libfile /usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so Module "OpenSC smartcard framework (0.22)" added to database. vagrant@ubuntu2004:~/.pki/nssdb$ cat pkcs11.txt library= name=NSS Internal PKCS #11 Module parameters=configdir='sql:/home/vagrant/.pki/nssdb' certPrefix='' keyPrefix='' secmod='secmod.db' flags=optimizeSpace updatedir='' updateCertPrefix='' updateKeyPrefix='' updateid='' updateTokenDescription='' NSS=Flags=internal,critical trustOrder=75 cipherOrder=100 slotParams=(1={slotFlags=[ECC,RSA,DSA,DH,RC2,RC4,DES,RANDOM,SHA1,MD5,MD2,SSL,TLS,AES,Camellia,SEED,SHA256,SHA512] askpw=any timeout=30}) library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so name=PKCS #11 Trust Storage Module NSS=trustOrder=100 library=/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so name=OpenSC smartcard framework (0.22) vagrant@ubuntu2004:~/.pki/nssdb$ LC_ALL=C apt-cache policy libnss3 libnss3-tools libnss3: Installed: 2:3.98-0ubuntu0.20.04.2 Candidate: 2:3.98-0ubuntu0.20.04.2 Version table: *** 2:3.98-0ubuntu0.20.04.2 100 100 /var/lib/dpkg/status 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages libnss3-tools: Installed: 2:3.98-0ubuntu0.20.04.2 Candidate: 2:3.98-0ubuntu0.20.04.2 Version table: *** 2:3.98-0ubuntu0.20.04.2 100 100 /var/lib/dpkg/status 2:3.98-0ubuntu0.20.04.1 500 500 http://us.archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages 500 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages 2:3.49.1-1ubuntu1 500 500 http://us.archive.ubuntu.com/ubuntu focal/universe amd64 Packages vagrant@ubuntu2004:~/.pki/nssdb$ ```