{"id":"CLSA-2026-1773684091","aliases":[],"status":"published","title":"Update of ca-certificates","description":"- update to CKBI 2.84 from NSS 3.121\n- updated certificates:\n-     # Certificate \"ePKI Root Certification Authority\"\n-     # Certificate \"GlobalSign Root CA\"\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Comodo AAA Services root\"\n-     # Certificate \"XRamp Global CA Root\"\n-     # Certificate \"Go Daddy Class 2 CA\"\n-     # Certificate \"Starfield Class 2 CA\"\n- removed certificates:\n-     # Certificate \"Baltimore CyberTrust Root\"\n-     # Certificate \"Autoridad Certificadora Raiz de la Secretaria de Economia\"\n-     # Certificate \"Certipost E-Trust TOP Root CA\"\n-     # Certificate \"Swisscom Root CA 1\"\n-     # Certificate \"A-Trust-nQual-03\"\n-     # Certificate \"KISA RootCA 1\"\n- added certificates:\n-     # Certificate \"TrustAsia SMIME ECC Root CA\"\n-     # Certificate \"TrustAsia SMIME RSA Root CA\"\n-     # Certificate \"TrustAsia TLS ECC Root CA\"\n-     # Certificate \"TrustAsia TLS RSA Root CA\"\n-     # Certificate \"SwissSign RSA SMIME Root CA 2022 - 1\"\n-     # Certificate \"SwissSign RSA TLS Root CA 2022 - 1\"\n-     # Certificate \"OISTE Client Root ECC G1\"\n-     # Certificate \"OISTE Client Root RSA G1\"\n-     # Certificate \"OISTE Server Root ECC G1\"\n-     # Certificate \"OISTE Server Root RSA G1\"\n-     # Certificate \"e-Szigno TLS Root CA 2023\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-03-16T18:01:36Z","modified":"2026-06-01T00:32:07Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ca-certificates","fixed_in":["2026.2.84_v7.0.306-90.1.el9_2.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.84_v7.0.306-90.1.el9_2.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1773684091.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1773684091","title":"Update of ca-certificates","description":"- update to CKBI 2.84 from NSS 3.121\n- updated certificates:\n-     # Certificate \"ePKI Root Certification Authority\"\n-     # Certificate \"GlobalSign Root CA\"\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Comodo AAA Services root\"\n-     # Certificate \"XRamp Global CA Root\"\n-     # Certificate \"Go Daddy Class 2 CA\"\n-     # Certificate \"Starfield Class 2 CA\"\n- removed certificates:\n-     # Certificate \"Baltimore CyberTrust Root\"\n-     # Certificate \"Autoridad Certificadora Raiz de la Secretaria de Economia\"\n-     # Certificate \"Certipost E-Trust TOP Root CA\"\n-     # Certificate \"Swisscom Root CA 1\"\n-     # Certificate \"A-Trust-nQual-03\"\n-     # Certificate \"KISA RootCA 1\"\n- added certificates:\n-     # Certificate \"TrustAsia SMIME ECC Root CA\"\n-     # Certificate \"TrustAsia SMIME RSA Root CA\"\n-     # Certificate \"TrustAsia TLS ECC Root CA\"\n-     # Certificate \"TrustAsia TLS RSA Root CA\"\n-     # Certificate \"SwissSign RSA SMIME Root CA 2022 - 1\"\n-     # Certificate \"SwissSign RSA TLS Root CA 2022 - 1\"\n-     # Certificate \"OISTE Client Root ECC G1\"\n-     # Certificate \"OISTE Client Root RSA G1\"\n-     # Certificate \"OISTE Server Root ECC G1\"\n-     # Certificate \"OISTE Server Root RSA G1\"\n-     # Certificate \"e-Szigno TLS Root CA 2023\"","status":"published","published":"2026-03-16T18:01:36Z","modified":"2026-06-01T00:32:07.740898773Z","updated_at":"2026-11-02T15:43:43.621843Z"}]}}