{"id":"CLSA-2025-1752082236","aliases":[],"status":"published","title":"Update of ca-certificates","description":"* Update ca-certificates database to 20250416:\n     - mozilla\\{certdata.h,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.74.\n     - The following certificates were updated:\n       # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n       # Certificate \"Entrust Root Certification Authority\"\n       # Certificate \"AffirmTrust Commercial\"\n       # Certificate \"AffirmTrust Networking\"\n       # Certificate \"AffirmTrust Premium\"\n       # Certificate \"AffirmTrust Premium ECC\"\n       # Certificate \"Entrust Root Certification Authority - G2\"\n       # Certificate \"Entrust Root Certification Authority - EC1\"\n       # Certificate \"GLOBALTRUST 2020\"\n       # Certificate \"certSIGN ROOT CA\"\n       # Certificate \"ACCVRAIZ1\"\n       # Certificate \"OISTE WISeKey Global Root GC CA\"\n       # Certificate \"Entrust Root Certification Authority - G4\"\n       # Certificate \"Security Communication ECC RootCA1\"\n       # Certificate \"BJCA Global Root CA1\"\n       # Certificate \"BJCA Global Root CA2\"\n     - The following certificates were added:\n       # Certificate \"Telekom Security TLS ECC Root 2020\"\n       # Certificate \"Telekom Security TLS RSA Root 2023\"\n       # Certificate \"FIRMAPROFESIONAL CA ROOT-A WEB\"\n       # Certificate \"TWCA CYBER Root CA\"\n       # Certificate \"SecureSign Root CA12\"\n       # Certificate \"SecureSign Root CA14\"\n       # Certificate \"SecureSign Root CA15\"\n       # Certificate \"D-TRUST BR Root CA 2 2023\"\n       # Certificate \"D-TRUST EV Root CA 2 2023\"\n     - The following certificates were removed:\n       # Certificate \"Security Communication Root CA\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-09T17:30:40Z","modified":"2026-10-26T09:32:05Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:20.04","package":"ca-certificates","fixed_in":["20250416~20.04.1+tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250416~20.04.1+tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1752082236.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1752082236","title":"Update of ca-certificates","description":"   * Update ca-certificates database to 20250416:\n     - mozilla\\{certdata.h,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.74.\n     - The following certificates were updated:\n       # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n       # Certificate \"Entrust Root Certification Authority\"\n       # Certificate \"AffirmTrust Commercial\"\n       # Certificate \"AffirmTrust Networking\"\n       # Certificate \"AffirmTrust Premium\"\n       # Certificate \"AffirmTrust Premium ECC\"\n       # Certificate \"Entrust Root Certification Authority - G2\"\n       # Certificate \"Entrust Root Certification Authority - EC1\"\n       # Certificate \"GLOBALTRUST 2020\"\n       # Certificate \"certSIGN ROOT CA\"\n       # Certificate \"ACCVRAIZ1\"\n       # Certificate \"OISTE WISeKey Global Root GC CA\"\n       # Certificate \"Entrust Root Certification Authority - G4\"\n       # Certificate \"Security Communication ECC RootCA1\"\n       # Certificate \"BJCA Global Root CA1\"\n       # Certificate \"BJCA Global Root CA2\"\n     - The following certificates were added:\n       # Certificate \"Telekom Security TLS ECC Root 2020\"\n       # Certificate \"Telekom Security TLS RSA Root 2023\"\n       # Certificate \"FIRMAPROFESIONAL CA ROOT-A WEB\"\n       # Certificate \"TWCA CYBER Root CA\"\n       # Certificate \"SecureSign Root CA12\"\n       # Certificate \"SecureSign Root CA14\"\n       # Certificate \"SecureSign Root CA15\"\n       # Certificate \"D-TRUST BR Root CA 2 2023\"\n       # Certificate \"D-TRUST EV Root CA 2 2023\"\n     - The following certificates were removed:\n       # Certificate \"Security Communication Root CA\"","status":"published","published":"2025-07-09T17:30:40Z","modified":"2026-10-26T09:32:05.124443506Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}