CLSA-2025-1752086731

Update of ca-certificates

No scoreFix available

update to CKBI 2.74 from NSS 3.110
updated certificates:

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Entrust Root Certification Authority"

```
# Certificate "AffirmTrust Commercial"
```
```
# Certificate "AffirmTrust Networking"
```
```
# Certificate "AffirmTrust Premium"
```

# Certificate "AffirmTrust Premium ECC"

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "Entrust Root Certification Authority - G4"

# Certificate "Security Communication ECC RootCA1"

```
# Certificate "BJCA Global Root CA1"
```
```
# Certificate "BJCA Global Root CA2"
```
removed certificates:
```
# Certificate "CCA India 2015 SPL"
```

# Certificate "VAS Latvijas Pasts SSI(RCA)"

added certificates:
```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```

# Certificate "D-TRUST BR Root CA 2 2023"

# Certificate "D-TRUST EV Root CA 2 2023"

removed unsupported certificates:

# Certificate "Verisign Class 1 Public Primary Certification Authority-G3"

# Certificate "Verisign Class 2 Public Primary Certification Authority-G3"

# Certificate "Symantec Class 1 Public Primary Certification Authority-G6"

# Certificate "Symantec Class 2 Public Primary Certification Authority-G6"

What each source reports

OSV No score

Update of ca-certificates

update to CKBI 2.74 from NSS 3.110
updated certificates:

# Certificate "Entrust.net Premium 2048 Secure Server CA"

# Certificate "Entrust Root Certification Authority"

```
# Certificate "AffirmTrust Commercial"
```
```
# Certificate "AffirmTrust Networking"
```
```
# Certificate "AffirmTrust Premium"
```

# Certificate "AffirmTrust Premium ECC"

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "certSIGN ROOT CA"
```
```
# Certificate "ACCVRAIZ1"
```

# Certificate "Entrust Root Certification Authority - G4"

# Certificate "Security Communication ECC RootCA1"

```
# Certificate "BJCA Global Root CA1"
```
```
# Certificate "BJCA Global Root CA2"
```
removed certificates:
```
# Certificate "CCA India 2015 SPL"
```

# Certificate "VAS Latvijas Pasts SSI(RCA)"

added certificates:
```
# Certificate "TWCA CYBER Root CA"
```
```
# Certificate "TWCA Global Root CA G2"
```
```
# Certificate "SecureSign Root CA12"
```
```
# Certificate "SecureSign Root CA14"
```
```
# Certificate "SecureSign Root CA15"
```

# Certificate "D-TRUST BR Root CA 2 2023"

# Certificate "D-TRUST EV Root CA 2 2023"

removed unsupported certificates:

# Certificate "Verisign Class 1 Public Primary Certification Authority-G3"

# Certificate "Verisign Class 2 Public Primary Certification Authority-G3"

# Certificate "Symantec Class 1 Public Primary Certification Authority-G6"

# Certificate "Symantec Class 2 Public Primary Certification Authority-G6"

Record: CLSA-2025-1752086731
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`ca-certificates` TuxCare:CentOS:7	before 2025.2.74_v7.0.306-72.el7_9.tuxcare.els1	2025.2.74_v7.0.306-72.el7_9.tuxcare.els1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2025-1752086731 is a vulnerability with no CVSS score yet in ca-certificates, published July 9, 2025. No source lists public exploit code. Fixed in ca-certificates 2025.2.74_v7.0.306-72.el7_9.tuxcare.els1.

References

errata.tuxcare.com/els_os/centos7els/CLSA-2025-1752086731.html