CLSA-2026-1792680328
Update of ca-certificates
No scoreFix available
- Update ca-certificates database to 20261021:
- mozilla{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.92.
- The following certificates were updated:
Certificate "Izenpe.com"
Certificate "OISTE Server Root RSA G1"
Certificate "Amazon Root CA 1"
Certificate "Amazon Root CA 2"
Certificate "Amazon Root CA 3"
Certificate "Amazon Root CA 4"
Certificate "GlobalSign ECC Root CA - R4"
Certificate "GTS Root R1"
Certificate "GTS Root R3"
Certificate "GTS Root R4"
Certificate "TrustAsia Global Root CA G3"
Certificate "TrustAsia Global Root CA G4"
- The following certificates were added:
Certificate "e-Szigno TLS Root CA 2023"
Certificate "SECOM TLS RSA Root CA 2024"
Certificate "SECOM TLS ECC Root CA 2024"
Certificate "Telia EC TLS Root CA v3"
Certificate "Telia RSA TLS Root CA v3"
- The following certificates were removed:
Certificate "emSign ECC Root CA - G3"
- The following certificates were distrusted:
Certificate "AffirmTrust Networking"
Certificate "Entrust Root Certification Authority"
Certificate "Secure Global CA"
Certificate "SecureSign RootCA11"
Certificate "SecureTrust CA"
Certificate "SwissSign Silver CA - G2"
Certificate "TeliaSonera Root CA v1"
Certificate "XRamp Global CA Root"
Certificate "certSIGN ROOT CA"
Certificate "ePKI Root Certification Authority"
- The following certificates are no longer trusted for TLS server authentication:
Certificate "QuoVadis Root CA 2"
Certificate "QuoVadis Root CA 3"
Certificate "DigiCert Assured ID Root CA"
Certificate "DigiCert Global Root CA"
Certificate "DigiCert High Assurance EV Root CA"
Certificate "SwissSign Gold CA - G2"
Certificate "COMODO Certification Authority"
Certificate "Certigna"
Certificate "Atos TrustedRoot 2011"
Certificate "Entrust Root Certification Authority - G2"
Certificate "Entrust Root Certification Authority - EC1"
Certificate "GTS Root R2"
What each source reports
OSV No score
Update of ca-certificates
- Update ca-certificates database to 20261021:
- mozilla{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle of the version 2.92.
- The following certificates were updated:
Certificate "Izenpe.com"
Certificate "OISTE Server Root RSA G1"
Certificate "Amazon Root CA 1"
Certificate "Amazon Root CA 2"
Certificate "Amazon Root CA 3"
Certificate "Amazon Root CA 4"
Certificate "GlobalSign ECC Root CA - R4"
Certificate "GTS Root R1"
Certificate "GTS Root R3"
Certificate "GTS Root R4"
Certificate "TrustAsia Global Root CA G3"
Certificate "TrustAsia Global Root CA G4"
- The following certificates were added:
Certificate "e-Szigno TLS Root CA 2023"
Certificate "SECOM TLS RSA Root CA 2024"
Certificate "SECOM TLS ECC Root CA 2024"
Certificate "Telia EC TLS Root CA v3"
Certificate "Telia RSA TLS Root CA v3"
- The following certificates were removed:
Certificate "emSign ECC Root CA - G3"
- The following certificates were distrusted:
Certificate "AffirmTrust Networking"
Certificate "Entrust Root Certification Authority"
Certificate "Secure Global CA"
Certificate "SecureSign RootCA11"
Certificate "SecureTrust CA"
Certificate "SwissSign Silver CA - G2"
Certificate "TeliaSonera Root CA v1"
Certificate "XRamp Global CA Root"
Certificate "certSIGN ROOT CA"
Certificate "ePKI Root Certification Authority"
- The following certificates are no longer trusted for TLS server authentication:
Certificate "QuoVadis Root CA 2"
Certificate "QuoVadis Root CA 3"
Certificate "DigiCert Assured ID Root CA"
Certificate "DigiCert Global Root CA"
Certificate "DigiCert High Assurance EV Root CA"
Certificate "SwissSign Gold CA - G2"
Certificate "COMODO Certification Authority"
Certificate "Certigna"
Certificate "Atos TrustedRoot 2011"
Certificate "Entrust Root Certification Authority - G2"
Certificate "Entrust Root Certification Authority - EC1"
Certificate "GTS Root R2"
- Record
CLSA-2026-1792680328- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesTuxCare:Ubuntu:20.04 |
before 20261021~20.04.1+tuxcare.els1 | 20261021~20.04.1+tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1792680328 is a vulnerability with no CVSS score yet in ca-certificates, published October 22, 2026. No source lists public exploit code. Fixed in ca-certificates 20261021~20.04.1+tuxcare.els1.