CLSA-2024-1730917116

Update of ca-certificates

No scoreFix available

update to CKBI 2.70 from NSS 3.106
updated certificates:
```
# Certificate "GLOBALTRUST 2020"
```

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

```
# Certificate "GlobalSign Root CA"
```

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Baltimore CyberTrust Root"

# Certificate "Entrust Root Certification Authority"

```
# Certificate "Certum Root CA"
```

# Certificate "Comodo AAA Services root"

```
# Certificate "QuoVadis Root CA 2"
```
```
# Certificate "QuoVadis Root CA 3"
```
```
# Certificate "XRamp Global CA Root"
```
```
# Certificate "Go Daddy Class 2 CA"
```
```
# Certificate "Starfield Class 2 CA"
```

# Certificate "DigiCert Assured ID Root CA"

# Certificate "DigiCert Global Root CA"

# Certificate "DigiCert High Assurance EV Root CA"

```
# Certificate "SwissSign Gold CA - G2"
```

# Certificate "SwissSign Silver CA - G2"

```
# Certificate "SecureTrust CA"
```
```
# Certificate "Secure Global CA"
```

# Certificate "COMODO ECC Certification Authority"

# Certificate "OISTE WISeKey Global Root GA CA"

```
# Certificate "Certigna"
```

# Certificate "ePKI Root Certification Authority"

```
# Certificate "certSIGN ROOT CA"
```

# Certificate "NetLock Arany (Class Gold) Főtanúsítvány"

```
# Certificate "SecureSign RootCA11"
```

# Certificate "Microsec e-Szigno Root CA 2009"

# Certificate "GlobalSign Root CA - R3"

# Certificate "Go Daddy Root Certificate Authority - G2"

# Certificate "Starfield Root Certificate Authority - G2"

# Certificate "Starfield Services Root Certificate Authority - G2"

```
# Certificate "AffirmTrust Commercial"
```
```
# Certificate "AffirmTrust Networking"
```
```
# Certificate "AffirmTrust Premium"
```

# Certificate "AffirmTrust Premium ECC"

# Certificate "Certum Trusted Network CA"

# Certificate "TWCA Root Certification Authority"

# Certificate "Security Communication RootCA2"

# Certificate "Actalis Authentication Root CA"

# Certificate "D-TRUST Root Class 3 CA 2 2009"

# Certificate "D-TRUST Root Class 3 CA 2 EV 2009"

```
# Certificate "CA Disig Root R2"
```
```
# Certificate "ACCVRAIZ1"
```
```
# Certificate "TWCA Global Root CA"
```
```
# Certificate "TeliaSonera Root CA v1"
```
```
# Certificate "Atos TrustedRoot 2011"
```
```
# Certificate "QuoVadis Root CA 1 G3"
```
```
# Certificate "QuoVadis Root CA 2 G3"
```
```
# Certificate "QuoVadis Root CA 3 G3"
```

# Certificate "DigiCert Assured ID Root G2"

# Certificate "DigiCert Assured ID Root G3"

# Certificate "DigiCert Global Root G2"

# Certificate "DigiCert Global Root G3"

# Certificate "DigiCert Trusted Root G4"

# Certificate "COMODO RSA Certification Authority"

# Certificate "USERTrust RSA Certification Authority"

# Certificate "USERTrust ECC Certification Authority"

# Certificate "GlobalSign ECC Root CA - R5"

# Certificate "IdenTrust Commercial Root CA 1"

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "CFCA EV ROOT"
```

# Certificate "OISTE WISeKey Global Root GB CA"

# Certificate "Certum Trusted Network CA 2"

# Certificate "Hellenic Academic and Research Institutions RootCA 2015"

# Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015"

```
# Certificate "Amazon Root CA 2"
```
```
# Certificate "Amazon Root CA 4"
```
```
# Certificate "GDCA TrustAUTH R5 ROOT"
```

# Certificate "SSL.com Root Certification Authority RSA"

# Certificate "SSL.com Root Certification Authority ECC"

# Certificate "SSL.com EV Root Certification Authority RSA R2"

# Certificate "SSL.com EV Root Certification Authority ECC"

# Certificate "GlobalSign Root CA - R6"

# Certificate "OISTE WISeKey Global Root GC CA"

```
# Certificate "UCA Global G2 Root"
```

# Certificate "UCA Extended Validation Root"

```
# Certificate "Certigna Root CA"
```

# Certificate "emSign ECC Root CA - G3"

# Certificate "emSign ECC Root CA - C3"

# Certificate "Entrust Root Certification Authority - G4"

```
# Certificate "e-Szigno Root CA 2017"
```

# Certificate "Trustwave Global Certification Authority"

# Certificate "Trustwave Global ECC P256 Certification Authority"

# Certificate "Trustwave Global ECC P384 Certification Authority"

```
# Certificate "Certum EC-384 CA"
```
```
# Certificate "Certum Trusted Root CA"
```

# Certificate "Security Communication RootCA3"

# Certificate "Security Communication ECC RootCA1"

# Certificate "E-Tugra Global Root CA RSA v3"

# Certificate "E-Tugra Global Root CA ECC v3"

removed certificates:

# Certificate "Security Communication Root CA"

# Certificate "Camerfirma Chambers of Commerce Root"

# Certificate "Hongkong Post Root CA 1"

# Certificate "Chambers of Commerce Root - 2008"

# Certificate "Global Chambersign Root - 2008"

# Certificate "E-Tugra Certification Authority"

```
# Certificate "TrustCor RootCert CA-1"
```
```
# Certificate "TrustCor RootCert CA-2"
```
```
# Certificate "TrustCor ECA-1"
```

# Certificate "Certification Authority of WoSign G2"

```
# Certificate "CA WoSign ECC Root"
```
```
# Certificate "A-Trust-Root-05"
```
```
# Certificate "A-Trust-Qual-02"
```

# Certificate "Certification Authority of WoSign"

```
# Certificate "CA 沃通根证书"
```
```
# Certificate "ADOCA02"
```

# Certificate "StartCom Certification Authority G2"

# Certificate "Macao Post eSignTrust Root Certification Authority (G02)"

# Certificate "Autoridade Certificadora Raiz Brasileira v2"

```
# Certificate "LuxTrust Global Root"
```
```
# Certificate "AC1 RAIZ MTIN"
```
```
# Certificate "CCA India 2011"
```

# Certificate "China Internet Network Information Center EV Certificates Root"

```
# Certificate "SITHS CA v3"
```
```
# Certificate "ANF Server CA"
```
```
# Certificate "KEYNECTIS ROOT CA"
```

# Certificate "I.CA - Standard Certification Authority, 09/2009"

# Certificate "I.CA - Qualified Certification Authority, 09/2009"

# Certificate "VI Registru Centras RCSC (RootCA)"

# Certificate "Autoridade Certificadora Raiz Brasileira v1"

# Certificate "Actalis Authentication CA G1"

```
# Certificate "A-Trust-Qual-03"
```

# Certificate "AddTrust External CA Root"

# Certificate "StartCom Certification Authority"

```
# Certificate "CNNIC ROOT"
```

# Certificate "Staat der Nederlanden Root CA - G2"

```
# Certificate "CA Disig"
```

# Certificate "I.CA - Qualified root certificate"

# Certificate "I.CA - Standard root certificate"

# Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"

```
# Certificate "Japanese Government"
```
```
# Certificate "AdminCA-CD-T01"
```
```
# Certificate "Admin-Root-CA"
```

# Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"

```
# Certificate "Halcom CA FO"
```
```
# Certificate "Halcom CA PO 2"
```
```
# Certificate "ACNLB"
```
```
# Certificate "state-institutions"
```

# Certificate "D-TRUST Root Class 2 CA 2007"

# Certificate "D-TRUST Root Class 3 CA 2007"

# Certificate "Root CA Generalitat Valenciana"

# Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"

# Certificate "VAS Latvijas Pasts SSI(RCA)"

# Certificate "ANCERT Certificados CGN"

# Certificate "ANCERT Certificados Notariales"

# Certificate "ANCERT Corporaciones de Derecho Publico"

# Certificate "Certipost E-Trust Primary Qualified CA"

# Certificate "Certipost E-Trust Primary Normalised CA"

```
# Certificate "Cybertrust Global Root"
```
```
# Certificate "IGC/A"
```

# Certificate "Microsec e-Szigno Root CA"

```
# Certificate "LGPKI"
```

# Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"

# Certificate "Staat der Nederlanden Root CA"

```
# Certificate "Juur-SK"
```

# Certificate "Global Chambersign Root"

```
# Certificate "GeoTrust Global CA"
```
```
# Certificate "GeoTrust Global CA 2"
```

# Certificate "QuoVadis Root Certification Authority"

```
# Certificate "Sonera Class2 CA"
```
```
# Certificate "VeriSign, Inc."
```

# Certificate "Microsoft Root Authority"

# Certificate "Microsoft Root Certificate Authority"

# Certificate "GTE CyberTrust Global Root"

```
# Certificate "Thawte Server CA"
```

# Certificate "Thawte Premium Server CA"

# Certificate "Equifax Secure Global eBusiness CA-1"

```
# Certificate "Equifax"
```
```
# Certificate "Class 1 Primary CA"
```
```
# Certificate "UTN-USERFirst-Object"
```

# Certificate "CHAMBERS OF COMMERCE ROOT - 2016"

added certificates:

# Certificate "LAWtrust Root CA2 (4096)"

# Certificate "Sectigo Public Email Protection Root E46"

# Certificate "Sectigo Public Email Protection Root R46"

# Certificate "Sectigo Public Server Authentication Root E46"

# Certificate "Sectigo Public Server Authentication Root R46"

# Certificate "SSL.com TLS RSA Root CA 2022"

# Certificate "SSL.com TLS ECC Root CA 2022"

# Certificate "SSL.com Client ECC Root CA 2022"

# Certificate "SSL.com Client RSA Root CA 2022"

# Certificate "Atos TrustedRoot Root CA ECC G2 2020"

# Certificate "Atos TrustedRoot Root CA RSA G2 2020"

# Certificate "Atos TrustedRoot Root CA ECC TLS 2021"

# Certificate "Atos TrustedRoot Root CA RSA TLS 2021"

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

# Certificate "CommScope Public Trust ECC Root-01"

# Certificate "CommScope Public Trust ECC Root-02"

# Certificate "CommScope Public Trust RSA Root-01"

# Certificate "CommScope Public Trust RSA Root-02"

# Certificate "D-Trust SBR Root CA 1 2022"

# Certificate "D-Trust SBR Root CA 2 2022"

# Certificate "Telekom Security SMIME ECC Root 2021"

# Certificate "Telekom Security TLS ECC Root 2020"

# Certificate "Telekom Security SMIME RSA Root 2023"

# Certificate "Telekom Security TLS RSA Root 2023"

# Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"

```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```
remove duplicated certificate record:

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

What each source reports

OSVNo score

Update of ca-certificates

update to CKBI 2.70 from NSS 3.106
updated certificates:
```
# Certificate "GLOBALTRUST 2020"
```

# Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

```
# Certificate "GlobalSign Root CA"
```

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Baltimore CyberTrust Root"

# Certificate "Entrust Root Certification Authority"

```
# Certificate "Certum Root CA"
```

# Certificate "Comodo AAA Services root"

```
# Certificate "QuoVadis Root CA 2"
```
```
# Certificate "QuoVadis Root CA 3"
```
```
# Certificate "XRamp Global CA Root"
```
```
# Certificate "Go Daddy Class 2 CA"
```
```
# Certificate "Starfield Class 2 CA"
```

# Certificate "DigiCert Assured ID Root CA"

# Certificate "DigiCert Global Root CA"

# Certificate "DigiCert High Assurance EV Root CA"

```
# Certificate "SwissSign Gold CA - G2"
```

# Certificate "SwissSign Silver CA - G2"

```
# Certificate "SecureTrust CA"
```
```
# Certificate "Secure Global CA"
```

# Certificate "COMODO ECC Certification Authority"

# Certificate "OISTE WISeKey Global Root GA CA"

```
# Certificate "Certigna"
```

# Certificate "ePKI Root Certification Authority"

```
# Certificate "certSIGN ROOT CA"
```

# Certificate "NetLock Arany (Class Gold) Főtanúsítvány"

```
# Certificate "SecureSign RootCA11"
```

# Certificate "Microsec e-Szigno Root CA 2009"

# Certificate "GlobalSign Root CA - R3"

# Certificate "Go Daddy Root Certificate Authority - G2"

# Certificate "Starfield Root Certificate Authority - G2"

# Certificate "Starfield Services Root Certificate Authority - G2"

```
# Certificate "AffirmTrust Commercial"
```
```
# Certificate "AffirmTrust Networking"
```
```
# Certificate "AffirmTrust Premium"
```

# Certificate "AffirmTrust Premium ECC"

# Certificate "Certum Trusted Network CA"

# Certificate "TWCA Root Certification Authority"

# Certificate "Security Communication RootCA2"

# Certificate "Actalis Authentication Root CA"

# Certificate "D-TRUST Root Class 3 CA 2 2009"

# Certificate "D-TRUST Root Class 3 CA 2 EV 2009"

```
# Certificate "CA Disig Root R2"
```
```
# Certificate "ACCVRAIZ1"
```
```
# Certificate "TWCA Global Root CA"
```
```
# Certificate "TeliaSonera Root CA v1"
```
```
# Certificate "Atos TrustedRoot 2011"
```
```
# Certificate "QuoVadis Root CA 1 G3"
```
```
# Certificate "QuoVadis Root CA 2 G3"
```
```
# Certificate "QuoVadis Root CA 3 G3"
```

# Certificate "DigiCert Assured ID Root G2"

# Certificate "DigiCert Assured ID Root G3"

# Certificate "DigiCert Global Root G2"

# Certificate "DigiCert Global Root G3"

# Certificate "DigiCert Trusted Root G4"

# Certificate "COMODO RSA Certification Authority"

# Certificate "USERTrust RSA Certification Authority"

# Certificate "USERTrust ECC Certification Authority"

# Certificate "GlobalSign ECC Root CA - R5"

# Certificate "IdenTrust Commercial Root CA 1"

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "CFCA EV ROOT"
```

# Certificate "OISTE WISeKey Global Root GB CA"

# Certificate "Certum Trusted Network CA 2"

# Certificate "Hellenic Academic and Research Institutions RootCA 2015"

# Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015"

```
# Certificate "Amazon Root CA 2"
```
```
# Certificate "Amazon Root CA 4"
```
```
# Certificate "GDCA TrustAUTH R5 ROOT"
```

# Certificate "SSL.com Root Certification Authority RSA"

# Certificate "SSL.com Root Certification Authority ECC"

# Certificate "SSL.com EV Root Certification Authority RSA R2"

# Certificate "SSL.com EV Root Certification Authority ECC"

# Certificate "GlobalSign Root CA - R6"

# Certificate "OISTE WISeKey Global Root GC CA"

```
# Certificate "UCA Global G2 Root"
```

# Certificate "UCA Extended Validation…

Record: CLSA-2024-1730917116
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`ca-certificates` TuxCare:CentOS-Stream:8	before 2024.2.70_v7.0.306-80.0.el8.tuxcare.els1	2024.2.70_v7.0.306-80.0.el8.tuxcare.els1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2024-1730917116 is a vulnerability with no CVSS score yet in ca-certificates, published November 6, 2024. No source lists public exploit code. Fixed in ca-certificates 2024.2.70_v7.0.306-80.0.el8.tuxcare.els1.

References

errata.tuxcare.com/centos8stream-els/CLSA-2024-1730917116.html

This page doesn't list everything

Left out here: the rest of 1 source description. The JSON record has them.