{"id":"CLSA-2026-1792680328","aliases":[],"status":"published","title":"Update of ca-certificates","description":"* Update ca-certificates database to 20261021:\n     - mozilla\\{certdata.txt,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.92.\n     - The following certificates were updated:\n       # Certificate \"Izenpe.com\"\n       # Certificate \"OISTE Server Root RSA G1\"\n       # Certificate \"Amazon Root CA 1\"\n       # Certificate \"Amazon Root CA 2\"\n       # Certificate \"Amazon Root CA 3\"\n       # Certificate \"Amazon Root CA 4\"\n       # Certificate \"GlobalSign ECC Root CA - R4\"\n       # Certificate \"GTS Root R1\"\n       # Certificate \"GTS Root R3\"\n       # Certificate \"GTS Root R4\"\n       # Certificate \"TrustAsia Global Root CA G3\"\n       # Certificate \"TrustAsia Global Root CA G4\"\n     - The following certificates were added:\n       # Certificate \"e-Szigno TLS Root CA 2023\"\n       # Certificate \"SECOM TLS RSA Root CA 2024\"\n       # Certificate \"SECOM TLS ECC Root CA 2024\"\n       # Certificate \"Telia EC TLS Root CA v3\"\n       # Certificate \"Telia RSA TLS Root CA v3\"\n     - The following certificates were removed:\n       # Certificate \"emSign ECC Root CA - G3\"\n     - The following certificates were distrusted:\n       # Certificate \"AffirmTrust Networking\"\n       # Certificate \"Entrust Root Certification Authority\"\n       # Certificate \"Secure Global CA\"\n       # Certificate \"SecureSign RootCA11\"\n       # Certificate \"SecureTrust CA\"\n       # Certificate \"SwissSign Silver CA - G2\"\n       # Certificate \"TeliaSonera Root CA v1\"\n       # Certificate \"XRamp Global CA Root\"\n       # Certificate \"certSIGN ROOT CA\"\n       # Certificate \"ePKI Root Certification Authority\"\n     - The following certificates are no longer trusted for TLS server authentication:\n       # Certificate \"QuoVadis Root CA 2\"\n       # Certificate \"QuoVadis Root CA 3\"\n       # Certificate \"DigiCert Assured ID Root CA\"\n       # Certificate \"DigiCert Global Root CA\"\n       # Certificate \"DigiCert High Assurance EV Root CA\"\n       # Certificate \"SwissSign Gold CA - G2\"\n       # Certificate \"COMODO Certification Authority\"\n       # Certificate \"Certigna\"\n       # Certificate \"Atos TrustedRoot 2011\"\n       # Certificate \"Entrust Root Certification Authority - G2\"\n       # Certificate \"Entrust Root Certification Authority - EC1\"\n       # Certificate \"GTS Root R2\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-22T14:45:36Z","modified":"2026-10-26T09:32:06Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:20.04","package":"ca-certificates","fixed_in":["20261021~20.04.1+tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20261021~20.04.1+tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1792680328.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1792680328","title":"Update of ca-certificates","description":"   * Update ca-certificates database to 20261021:\n     - mozilla\\{certdata.txt,nssckbi.h}: Update Mozilla certificate\n       authority bundle of the version 2.92.\n     - The following certificates were updated:\n       # Certificate \"Izenpe.com\"\n       # Certificate \"OISTE Server Root RSA G1\"\n       # Certificate \"Amazon Root CA 1\"\n       # Certificate \"Amazon Root CA 2\"\n       # Certificate \"Amazon Root CA 3\"\n       # Certificate \"Amazon Root CA 4\"\n       # Certificate \"GlobalSign ECC Root CA - R4\"\n       # Certificate \"GTS Root R1\"\n       # Certificate \"GTS Root R3\"\n       # Certificate \"GTS Root R4\"\n       # Certificate \"TrustAsia Global Root CA G3\"\n       # Certificate \"TrustAsia Global Root CA G4\"\n     - The following certificates were added:\n       # Certificate \"e-Szigno TLS Root CA 2023\"\n       # Certificate \"SECOM TLS RSA Root CA 2024\"\n       # Certificate \"SECOM TLS ECC Root CA 2024\"\n       # Certificate \"Telia EC TLS Root CA v3\"\n       # Certificate \"Telia RSA TLS Root CA v3\"\n     - The following certificates were removed:\n       # Certificate \"emSign ECC Root CA - G3\"\n     - The following certificates were distrusted:\n       # Certificate \"AffirmTrust Networking\"\n       # Certificate \"Entrust Root Certification Authority\"\n       # Certificate \"Secure Global CA\"\n       # Certificate \"SecureSign RootCA11\"\n       # Certificate \"SecureTrust CA\"\n       # Certificate \"SwissSign Silver CA - G2\"\n       # Certificate \"TeliaSonera Root CA v1\"\n       # Certificate \"XRamp Global CA Root\"\n       # Certificate \"certSIGN ROOT CA\"\n       # Certificate \"ePKI Root Certification Authority\"\n     - The following certificates are no longer trusted for TLS server authentication:\n       # Certificate \"QuoVadis Root CA 2\"\n       # Certificate \"QuoVadis Root CA 3\"\n       # Certificate \"DigiCert Assured ID Root CA\"\n       # Certificate \"DigiCert Global Root CA\"\n       # Certificate \"DigiCert High Assurance EV Root CA\"\n       # Certificate \"SwissSign Gold CA - G2\"\n       # Certificate \"COMODO Certification Authority\"\n       # Certificate \"Certigna\"\n       # Certificate \"Atos TrustedRoot 2011\"\n       # Certificate \"Entrust Root Certification Authority - G2\"\n       # Certificate \"Entrust Root Certification Authority - EC1\"\n       # Certificate \"GTS Root R2\"","status":"published","published":"2026-10-22T14:45:36Z","modified":"2026-10-26T09:32:06.363679234Z","updated_at":"2026-11-02T15:43:54.981307Z"}]}}