CLSA-2026-1792706103

Update of ca-certificates

No scoreFix available

update to CKBI 2.92 from NSS 3.131.1
updated certificates:
```
# Certificate "Izenpe.com"
```
```
# Certificate "Amazon Root CA 1"
```
```
# Certificate "Amazon Root CA 2"
```
```
# Certificate "Amazon Root CA 3"
```
```
# Certificate "Amazon Root CA 4"
```

# Certificate "GlobalSign ECC Root CA - R4"

```
# Certificate "GTS Root R1"
```
```
# Certificate "GTS Root R3"
```
```
# Certificate "GTS Root R4"
```

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

removed certificates:
```
# Certificate "CFCA GT CA"
```

# Certificate "GeoTrust Primary Certification Authority"

# Certificate "GeoTrust Primary Certification Authority - G2"

# Certificate "GeoTrust Primary Certification Authority - G3"

```
# Certificate "GeoTrust Universal CA"
```

# Certificate "GeoTrust Universal CA 2"

# Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"

# Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"

# Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"

# Certificate "VeriSign Universal Root Certification Authority"

# Certificate "emSign ECC Root CA - G3"

```
# Certificate "thawte Primary Root CA"
```

# Certificate "thawte Primary Root CA - G2"

# Certificate "thawte Primary Root CA - G3"

added certificates:
```
# Certificate "SecureSign Root CA16"
```

# Certificate "SECOM TLS RSA Root CA 2024"

# Certificate "SECOM TLS ECC Root CA 2024"

# Certificate "SECOM SMIME RSA Root CA 2024"

# Certificate "Telia EC Email Root CA v3"

# Certificate "Telia EC TLS Root CA v3"

# Certificate "Telia RSA Email Root CA v3"

# Certificate "Telia RSA TLS Root CA v3"

distrusted certificates:

# Certificate "AC Raíz Certicámara S.A."

```
# Certificate "ACEDICOM Root"
```
```
# Certificate "AffirmTrust Networking"
```

# Certificate "America Online Root Certification Authority 1"

```
# Certificate "CA Disig Root R1"
```

# Certificate "Certinomis - Autorité Racine"

```
# Certificate "ComSign CA"
```
```
# Certificate "ComSign Secured CA"
```
```
# Certificate "EC-ACC"
```

# Certificate "EE Certification Centre Root CA"

# Certificate "Entrust Root Certification Authority"

# Certificate "Hellenic Academic and Research Institutions RootCA 2011"

# Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"

```
# Certificate "Secure Global CA"
```
```
# Certificate "SecureSign RootCA11"
```
```
# Certificate "SecureTrust CA"
```

# Certificate "SECOM Trust Systems CO.,LTD."

# Certificate "SwissSign Platinum CA - G2"

# Certificate "SwissSign Silver CA - G2"

```
# Certificate "TeliaSonera Root CA v1"
```
```
# Certificate "XRamp Global CA Root"
```
```
# Certificate "certSIGN ROOT CA"
```

# Certificate "ePKI Root Certification Authority"

no longer trusted for TLS server authentication:
```
# Certificate "QuoVadis Root CA 2"
```
```
# Certificate "QuoVadis Root CA 3"
```

# Certificate "DigiCert Assured ID Root CA"

# Certificate "DigiCert Global Root CA"

# Certificate "DigiCert High Assurance EV Root CA"

```
# Certificate "SwissSign Gold CA - G2"
```

# Certificate "COMODO Certification Authority"

```
# Certificate "Certigna"
```
```
# Certificate "Atos TrustedRoot 2011"
```

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "GTS Root R2"
```

What each source reports

OSV No score

Update of ca-certificates

update to CKBI 2.92 from NSS 3.131.1
updated certificates:
```
# Certificate "Izenpe.com"
```
```
# Certificate "Amazon Root CA 1"
```
```
# Certificate "Amazon Root CA 2"
```
```
# Certificate "Amazon Root CA 3"
```
```
# Certificate "Amazon Root CA 4"
```

# Certificate "GlobalSign ECC Root CA - R4"

```
# Certificate "GTS Root R1"
```
```
# Certificate "GTS Root R3"
```
```
# Certificate "GTS Root R4"
```

# Certificate "TrustAsia Global Root CA G3"

# Certificate "TrustAsia Global Root CA G4"

removed certificates:
```
# Certificate "CFCA GT CA"
```

# Certificate "GeoTrust Primary Certification Authority"

# Certificate "GeoTrust Primary Certification Authority - G2"

# Certificate "GeoTrust Primary Certification Authority - G3"

```
# Certificate "GeoTrust Universal CA"
```

# Certificate "GeoTrust Universal CA 2"

# Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"

# Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"

# Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"

# Certificate "VeriSign Universal Root Certification Authority"

# Certificate "emSign ECC Root CA - G3"

```
# Certificate "thawte Primary Root CA"
```

# Certificate "thawte Primary Root CA - G2"

# Certificate "thawte Primary Root CA - G3"

added certificates:
```
# Certificate "SecureSign Root CA16"
```

# Certificate "SECOM TLS RSA Root CA 2024"

# Certificate "SECOM TLS ECC Root CA 2024"

# Certificate "SECOM SMIME RSA Root CA 2024"

# Certificate "Telia EC Email Root CA v3"

# Certificate "Telia EC TLS Root CA v3"

# Certificate "Telia RSA Email Root CA v3"

# Certificate "Telia RSA TLS Root CA v3"

distrusted certificates:

# Certificate "AC Raíz Certicámara S.A."

```
# Certificate "ACEDICOM Root"
```
```
# Certificate "AffirmTrust Networking"
```

# Certificate "America Online Root Certification Authority 1"

```
# Certificate "CA Disig Root R1"
```

# Certificate "Certinomis - Autorité Racine"

```
# Certificate "ComSign CA"
```
```
# Certificate "ComSign Secured CA"
```
```
# Certificate "EC-ACC"
```

# Certificate "EE Certification Centre Root CA"

# Certificate "Entrust Root Certification Authority"

# Certificate "Hellenic Academic and Research Institutions RootCA 2011"

# Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"

```
# Certificate "Secure Global CA"
```
```
# Certificate "SecureSign RootCA11"
```
```
# Certificate "SecureTrust CA"
```

# Certificate "SECOM Trust Systems CO.,LTD."

# Certificate "SwissSign Platinum CA - G2"

# Certificate "SwissSign Silver CA - G2"

```
# Certificate "TeliaSonera Root CA v1"
```
```
# Certificate "XRamp Global CA Root"
```
```
# Certificate "certSIGN ROOT CA"
```

# Certificate "ePKI Root Certification Authority"

no longer trusted for TLS server authentication:
```
# Certificate "QuoVadis Root CA 2"
```
```
# Certificate "QuoVadis Root CA 3"
```

# Certificate "DigiCert Assured ID Root CA"

# Certificate "DigiCert Global Root CA"

# Certificate "DigiCert High Assurance EV Root CA"

```
# Certificate "SwissSign Gold CA - G2"
```

# Certificate "COMODO Certification Authority"

```
# Certificate "Certigna"
```
```
# Certificate "Atos TrustedRoot 2011"
```

# Certificate "Entrust Root Certification Authority - G2"

# Certificate "Entrust Root Certification Authority - EC1"

```
# Certificate "GTS Root R2"
```

Record: CLSA-2026-1792706103
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`ca-certificates` TuxCare:AlmaLinux:9.2	before 2026.2.92_v7.0.306-90.1.el9_2.tuxcare.els1	2026.2.92_v7.0.306-90.1.el9_2.tuxcare.els1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2026-1792706103 is a vulnerability with no CVSS score yet in ca-certificates, published October 22, 2026. No source lists public exploit code. Fixed in ca-certificates 2026.2.92_v7.0.306-90.1.el9_2.tuxcare.els1.

References

errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792706103.html