{"id":"CLSA-2025-1752086731","aliases":[],"status":"published","title":"Update of ca-certificates","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- removed certificates:\n-     # Certificate \"CCA India 2015 SPL\"\n-     # Certificate \"VAS Latvijas Pasts SSI(RCA)\"\n- added certificates:\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"\n- removed unsupported certificates:\n-     # Certificate \"Verisign Class 1 Public Primary Certification Authority-G3\"\n-     # Certificate \"Verisign Class 2 Public Primary Certification Authority-G3\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority-G6\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority-G6\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-09T18:45:36Z","modified":"2026-06-01T00:33:17Z","fixes":[{"ecosystem":"TuxCare:CentOS:7","package":"ca-certificates","fixed_in":["2025.2.74_v7.0.306-72.el7_9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2025.2.74_v7.0.306-72.el7_9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1752086731.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1752086731","title":"Update of ca-certificates","description":"- update to CKBI 2.74 from NSS 3.110\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- removed certificates:\n-     # Certificate \"CCA India 2015 SPL\"\n-     # Certificate \"VAS Latvijas Pasts SSI(RCA)\"\n- added certificates:\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"\n- removed unsupported certificates:\n-     # Certificate \"Verisign Class 1 Public Primary Certification Authority-G3\"\n-     # Certificate \"Verisign Class 2 Public Primary Certification Authority-G3\"\n-     # Certificate \"Symantec Class 1 Public Primary Certification Authority-G6\"\n-     # Certificate \"Symantec Class 2 Public Primary Certification Authority-G6\"","status":"published","published":"2025-07-09T18:45:36Z","modified":"2026-06-01T00:33:17.899464883Z","updated_at":"2026-11-02T15:43:42.025438Z"}]}}