{"id":"CLSA-2024-1705941805","aliases":[],"status":"published","title":"Update of ca-certificates","description":"- Update to CKBI 2.64_v7.0.306 from NSS 3.95\n- Removing:\n-     # Certificate \"AC1 RAIZ MTIN\"\n-     # Certificate \"ACNLB\"\n-     # Certificate \"Actalis Authentication CA G1\"\n-     # Certificate \"AddTrust External CA Root\"\n-     # Certificate \"AdminCA-CD-T01\"\n-     # Certificate \"Admin-Root-CA\"\n-     # Certificate \"ADOCA02\"\n-     # Certificate \"ANF Server CA\"\n-     # Certificate \"A-Trust-Qual-03\"\n-     # Certificate \"A-Trust-Root-05\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v1\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v2\"\n-     # Certificate \"CA Disig\"\n-     # Certificate \"CCA India 2011\"\n-     # Certificate \"Certipost E-Trust Primary Normalised CA\"\n-     # Certificate \"Certipost E-Trust Primary Qualified CA\"\n-     # Certificate \"Class 1 Primary CA\"\n-     # Certificate \"Cybertrust Global Root\"\n-     # Certificate \"D-TRUST Root Class 2 CA 2007\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2007\"\n-     # Certificate \"EBG Elektronik Sertifika Hizmet Sağlayıcısı\"\n-     # Certificate \"e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi\"\n-     # Certificate \"Equifax\"\n-     # Certificate \"Equifax Secure Global eBusiness CA-1\"\n-     # Certificate \"E-Tugra Certification Authority\"\n-     # Certificate \"GeoTrust Global CA\"\n-     # Certificate \"GeoTrust Global CA 2\"\n-     # Certificate \"GTE CyberTrust Global Root\"\n-     # Certificate \"Halcom CA FO\"\n-     # Certificate \"Halcom CA PO 2\"\n-     # Certificate \"Hongkong Post Root CA 1\"\n-     # Certificate \"I.CA - Qualified Certification Authority, 09/2009\"\n-     # Certificate \"I.CA - Qualified root certificate\"\n-     # Certificate \"I.CA - Standard Certification Authority, 09/2009\"\n-     # Certificate \"I.CA - Standard root certificate\"\n-     # Certificate \"IGC/A\"\n-     # Certificate \"Japanese Government\"\n-     # Certificate \"Juur-SK\"\n-     # Certificate \"KEYNECTIS ROOT CA\"\n-     # Certificate \"LGPKI\"\n-     # Certificate \"LuxTrust Global Root\"\n-     # Certificate \"Macao Post eSignTrust Root Certification Authority (G02)\"\n-     # Certificate \"Microsec e-Szigno Root CA\"\n-     # Certificate \"Microsoft Root Authority\"\n-     # Certificate \"Microsoft Root Certificate Authority\"\n-     # Certificate \"NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado\"\n-     # Certificate \"QuoVadis Root Certification Authority\"\n-     # Certificate \"Root CA Generalitat Valenciana\"\n-     # Certificate \"SITHS CA v3\"\n-     # Certificate \"Sonera Class2 CA\"\n-     # Certificate \"Staat der Nederlanden Root CA\"\n-     # Certificate \"Staat der Nederlanden Root CA - G2\"\n-     # Certificate \"state-institutions\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority - G6\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority - G6\"\n-     # Certificate \"Thawte Premium Server CA\"\n-     # Certificate \"Thawte Server CA\"\n-     # Certificate \"TrustCor ECA-1\"\n-     # Certificate \"TrustCor RootCert CA-1\"\n-     # Certificate \"TrustCor RootCert CA-2\"\n-     # Certificate \"TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3\"\n-     # Certificate \"UTN-USERFirst-Object\"\n-     # Certificate \"Verisign Class 1 Public Primary Certification Authority - G3\"\n-     # Certificate \"Verisign Class 2 Public Primary Certification Authority - G3\"\n-     # Certificate \"VeriSign, Inc.\"\n-    Adding:\n-     # Certificate \"Atos TrustedRoot Root CA ECC G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA ECC TLS 2021\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA TLS 2021\"\n-     # Certificate \"CommScope Public Trust ECC Root-01\"\n-     # Certificate \"CommScope Public Trust ECC Root-02\"\n-     # Certificate \"CommScope Public Trust RSA Root-01\"\n-     # Certificate \"CommScope Public Trust RSA Root-02\"\n-     # Certificate \"LAWtrust Root CA2 (4096)\"\n-     # Certificate \"Sectigo Public Email Protection Root E46\"\n-     # Certificate \"Sectigo Public Email Protection Root R46\"\n-     # Certificate \"Sectigo Public Server Authentication Root E46\"\n-     # Certificate \"Sectigo Public Server Authentication Root R46\"\n-     # Certificate \"SSL.com Client ECC Root CA 2022\"\n-     # Certificate \"SSL.com Client RSA Root CA 2022\"\n-     # Certificate \"SSL.com TLS ECC Root CA 2022\"\n-     # Certificate \"SSL.com TLS RSA Root CA 2022\"\n-     # Certificate \"TrustAsia Global Root CA G3\"\n-     # Certificate \"TrustAsia Global Root CA G4\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-01-22T16:43:28Z","modified":"2026-06-01T00:33:03Z","fixes":[{"ecosystem":"TuxCare:CentOS:7","package":"ca-certificates","fixed_in":["2023.2.64_v7.0.306-72.el7_9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.2.64_v7.0.306-72.el7_9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1705941805.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2024-1705941805","title":"Update of ca-certificates","description":"- Update to CKBI 2.64_v7.0.306 from NSS 3.95\n- Removing:\n-     # Certificate \"AC1 RAIZ MTIN\"\n-     # Certificate \"ACNLB\"\n-     # Certificate \"Actalis Authentication CA G1\"\n-     # Certificate \"AddTrust External CA Root\"\n-     # Certificate \"AdminCA-CD-T01\"\n-     # Certificate \"Admin-Root-CA\"\n-     # Certificate \"ADOCA02\"\n-     # Certificate \"ANF Server CA\"\n-     # Certificate \"A-Trust-Qual-03\"\n-     # Certificate \"A-Trust-Root-05\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v1\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v2\"\n-     # Certificate \"CA Disig\"\n-     # Certificate \"CCA India 2011\"\n-     # Certificate \"Certipost E-Trust Primary Normalised CA\"\n-     # Certificate \"Certipost E-Trust Primary Qualified CA\"\n-     # Certificate \"Class 1 Primary CA\"\n-     # Certificate \"Cybertrust Global Root\"\n-     # Certificate \"D-TRUST Root Class 2 CA 2007\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2007\"\n-     # Certificate \"EBG Elektronik Sertifika Hizmet Sağlayıcısı\"\n-     # Certificate \"e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi\"\n-     # Certificate \"Equifax\"\n-     # Certificate \"Equifax Secure Global eBusiness CA-1\"\n-     # Certificate \"E-Tugra Certification Authority\"\n-     # Certificate \"GeoTrust Global CA\"\n-     # Certificate \"GeoTrust Global CA 2\"\n-     # Certificate \"GTE CyberTrust Global Root\"\n-     # Certificate \"Halcom CA FO\"\n-     # Certificate \"Halcom CA PO 2\"\n-     # Certificate \"Hongkong Post Root CA 1\"\n-     # Certificate \"I.CA - Qualified Certification Authority, 09/2009\"\n-     # Certificate \"I.CA - Qualified root certificate\"\n-     # Certificate \"I.CA - Standard Certification Authority, 09/2009\"\n-     # Certificate \"I.CA - Standard root certificate\"\n-     # Certificate \"IGC/A\"\n-     # Certificate \"Japanese Government\"\n-     # Certificate \"Juur-SK\"\n-     # Certificate \"KEYNECTIS ROOT CA\"\n-     # Certificate \"LGPKI\"\n-     # Certificate \"LuxTrust Global Root\"\n-     # Certificate \"Macao Post eSignTrust Root Certification Authority (G02)\"\n-     # Certificate \"Microsec e-Szigno Root CA\"\n-     # Certificate \"Microsoft Root Authority\"\n-     # Certificate \"Microsoft Root Certificate Authority\"\n-     # Certificate \"NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado\"\n-     # Certificate \"QuoVadis Root Certification Authority\"\n-     # Certificate \"Root CA Generalitat Valenciana\"\n-     # Certificate \"SITHS CA v3\"\n-     # Certificate \"Sonera Class2 CA\"\n-     # Certificate \"Staat der Nederlanden Root CA\"\n-     # Certificate \"Staat der Nederlanden Root CA - G2\"\n-     # Certificate \"state-institutions\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority - G6\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority - G6\"\n-     # Certificate \"Thawte Premium Server CA\"\n-     # Certificate \"Thawte Server CA\"\n-     # Certificate \"TrustCor ECA-1\"\n-     # Certificate \"TrustCor RootCert CA-1\"\n-     # Certificate \"TrustCor RootCert CA-2\"\n-     # Certificate \"TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3\"\n-     # Certificate \"UTN-USERFirst-Object\"\n-     # Certificate \"Verisign Class 1 Public Primary Certification Authority - G3\"\n-     # Certificate \"Verisign Class 2 Public Primary Certification Authority - G3\"\n-     # Certificate \"VeriSign, Inc.\"\n-    Adding:\n-     # Certificate \"Atos TrustedRoot Root CA ECC G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA ECC TLS 2021\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA G2 2020\"\n-     # Certificate \"Atos TrustedRoot Root CA RSA TLS 2021\"\n-     # Certificate \"CommScope Public Trust ECC Root-01\"\n-     # Certificate \"CommScope Public Trust ECC Root-02\"\n-     # Certificate \"CommScope Public Trust RSA Root-01\"\n-     # Certificate \"CommScope Public Trust RSA Root-02\"\n-     # Certificate \"LAWtrust Root CA2 (4096)\"\n-     # Certificate \"Sectigo Public Email Protection Root E46\"\n-     # Certificate \"Sectigo Public Email Protection Root R46\"\n-     # Certificate \"Sectigo Public Server Authentication Root E46\"\n-     # Certificate \"Sectigo Public Server Authentication Root R46\"\n-     # Certificate \"SSL.com Client ECC Root CA 2022\"\n-     # Certificate \"SSL.com Client RSA Root CA 2022\"\n-     # Certificate \"SSL.com TLS ECC Root CA 2022\"\n-     # Certificate \"SSL.com TLS RSA Root CA 2022\"\n-     # Certificate \"TrustAsia Global Root CA G3\"\n-     # Certificate \"TrustAsia Global Root CA G4\"","status":"published","published":"2024-01-22T16:43:28Z","modified":"2026-06-01T00:33:03.795343635Z","updated_at":"2026-11-02T15:43:40.88185Z"}]}}