{"id":"CLSA-2026-1792702229","aliases":[],"status":"published","title":"Update of ca-certificates","description":"- update to CKBI 2.92 from NSS 3.131.1\n- updated certificates:\n-     # Certificate \"OISTE Server Root RSA G1\"\n-     # Certificate \"Amazon Root CA 1\"\n-     # Certificate \"Amazon Root CA 2\"\n-     # Certificate \"Amazon Root CA 3\"\n-     # Certificate \"Amazon Root CA 4\"\n-     # Certificate \"GlobalSign ECC Root CA - R4\"\n-     # Certificate \"GTS Root R1\"\n-     # Certificate \"GTS Root R3\"\n-     # Certificate \"GTS Root R4\"\n-     # Certificate \"TrustAsia Global Root CA G3\"\n-     # Certificate \"TrustAsia Global Root CA G4\"\n- removed certificates:\n-     # Certificate \"CFCA GT CA\"\n-     # Certificate \"GeoTrust Primary Certification Authority\"\n-     # Certificate \"GeoTrust Primary Certification Authority - G2\"\n-     # Certificate \"GeoTrust Primary Certification Authority - G3\"\n-     # Certificate \"GeoTrust Universal CA\"\n-     # Certificate \"GeoTrust Universal CA 2\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G3\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G4\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G5\"\n-     # Certificate \"VeriSign Universal Root Certification Authority\"\n-     # Certificate \"emSign ECC Root CA - G3\"\n-     # Certificate \"thawte Primary Root CA\"\n-     # Certificate \"thawte Primary Root CA - G2\"\n-     # Certificate \"thawte Primary Root CA - G3\"\n- added certificates:\n-     # Certificate \"e-Szigno TLS Root CA 2023\"\n-     # Certificate \"SecureSign Root CA16\"\n-     # Certificate \"SECOM TLS RSA Root CA 2024\"\n-     # Certificate \"SECOM TLS ECC Root CA 2024\"\n-     # Certificate \"SECOM SMIME RSA Root CA 2024\"\n-     # Certificate \"Telia EC Email Root CA v3\"\n-     # Certificate \"Telia EC TLS Root CA v3\"\n-     # Certificate \"Telia RSA Email Root CA v3\"\n-     # Certificate \"Telia RSA TLS Root CA v3\"\n- distrusted certificates:\n-     # Certificate \"AC Raíz Certicámara S.A.\"\n-     # Certificate \"ACEDICOM Root\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"America Online Root Certification Authority 1\"\n-     # Certificate \"CA Disig Root R1\"\n-     # Certificate \"Certinomis - Autorité Racine\"\n-     # Certificate \"ComSign CA\"\n-     # Certificate \"ComSign Secured CA\"\n-     # Certificate \"EC-ACC\"\n-     # Certificate \"EE Certification Centre Root CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"Hellenic Academic and Research Institutions RootCA 2011\"\n-     # Certificate \"S-TRUST Authentication and Encryption Root CA 2005:PN\"\n-     # Certificate \"Secure Global CA\"\n-     # Certificate \"SecureSign RootCA11\"\n-     # Certificate \"SecureTrust CA\"\n-     # Certificate \"SECOM Trust Systems CO.,LTD.\"\n-     # Certificate \"SwissSign Platinum CA - G2\"\n-     # Certificate \"SwissSign Silver CA - G2\"\n-     # Certificate \"TeliaSonera Root CA v1\"\n-     # Certificate \"XRamp Global CA Root\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ePKI Root Certification Authority\"\n- no longer trusted for TLS server authentication:\n-     # Certificate \"QuoVadis Root CA 2\"\n-     # Certificate \"QuoVadis Root CA 3\"\n-     # Certificate \"DigiCert Assured ID Root CA\"\n-     # Certificate \"DigiCert Global Root CA\"\n-     # Certificate \"DigiCert High Assurance EV Root CA\"\n-     # Certificate \"SwissSign Gold CA - G2\"\n-     # Certificate \"COMODO Certification Authority\"\n-     # Certificate \"Certigna\"\n-     # Certificate \"Atos TrustedRoot 2011\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"GTS Root R2\"","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-22T20:50:38Z","modified":"2026-10-26T09:32:01Z","fixes":[{"ecosystem":"TuxCare:RHEL:7","package":"ca-certificates","fixed_in":["2026.2.92_v7.0.306-72.el7_9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.92_v7.0.306-72.el7_9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792702229.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1792702229","title":"Update of ca-certificates","description":"- update to CKBI 2.92 from NSS 3.131.1\n- updated certificates:\n-     # Certificate \"OISTE Server Root RSA G1\"\n-     # Certificate \"Amazon Root CA 1\"\n-     # Certificate \"Amazon Root CA 2\"\n-     # Certificate \"Amazon Root CA 3\"\n-     # Certificate \"Amazon Root CA 4\"\n-     # Certificate \"GlobalSign ECC Root CA - R4\"\n-     # Certificate \"GTS Root R1\"\n-     # Certificate \"GTS Root R3\"\n-     # Certificate \"GTS Root R4\"\n-     # Certificate \"TrustAsia Global Root CA G3\"\n-     # Certificate \"TrustAsia Global Root CA G4\"\n- removed certificates:\n-     # Certificate \"CFCA GT CA\"\n-     # Certificate \"GeoTrust Primary Certification Authority\"\n-     # Certificate \"GeoTrust Primary Certification Authority - G2\"\n-     # Certificate \"GeoTrust Primary Certification Authority - G3\"\n-     # Certificate \"GeoTrust Universal CA\"\n-     # Certificate \"GeoTrust Universal CA 2\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G3\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G4\"\n-     # Certificate \"VeriSign Class 3 Public Primary Certification Authority - G5\"\n-     # Certificate \"VeriSign Universal Root Certification Authority\"\n-     # Certificate \"emSign ECC Root CA - G3\"\n-     # Certificate \"thawte Primary Root CA\"\n-     # Certificate \"thawte Primary Root CA - G2\"\n-     # Certificate \"thawte Primary Root CA - G3\"\n- added certificates:\n-     # Certificate \"e-Szigno TLS Root CA 2023\"\n-     # Certificate \"SecureSign Root CA16\"\n-     # Certificate \"SECOM TLS RSA Root CA 2024\"\n-     # Certificate \"SECOM TLS ECC Root CA 2024\"\n-     # Certificate \"SECOM SMIME RSA Root CA 2024\"\n-     # Certificate \"Telia EC Email Root CA v3\"\n-     # Certificate \"Telia EC TLS Root CA v3\"\n-     # Certificate \"Telia RSA Email Root CA v3\"\n-     # Certificate \"Telia RSA TLS Root CA v3\"\n- distrusted certificates:\n-     # Certificate \"AC Raíz Certicámara S.A.\"\n-     # Certificate \"ACEDICOM Root\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"America Online Root Certification Authority 1\"\n-     # Certificate \"CA Disig Root R1\"\n-     # Certificate \"Certinomis - Autorité Racine\"\n-     # Certificate \"ComSign CA\"\n-     # Certificate \"ComSign Secured CA\"\n-     # Certificate \"EC-ACC\"\n-     # Certificate \"EE Certification Centre Root CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"Hellenic Academic and Research Institutions RootCA 2011\"\n-     # Certificate \"S-TRUST Authentication and Encryption Root CA 2005:PN\"\n-     # Certificate \"Secure Global CA\"\n-     # Certificate \"SecureSign RootCA11\"\n-     # Certificate \"SecureTrust CA\"\n-     # Certificate \"SECOM Trust Systems CO.,LTD.\"\n-     # Certificate \"SwissSign Platinum CA - G2\"\n-     # Certificate \"SwissSign Silver CA - G2\"\n-     # Certificate \"TeliaSonera Root CA v1\"\n-     # Certificate \"XRamp Global CA Root\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"ePKI Root Certification Authority\"\n- no longer trusted for TLS server authentication:\n-     # Certificate \"QuoVadis Root CA 2\"\n-     # Certificate \"QuoVadis Root CA 3\"\n-     # Certificate \"DigiCert Assured ID Root CA\"\n-     # Certificate \"DigiCert Global Root CA\"\n-     # Certificate \"DigiCert High Assurance EV Root CA\"\n-     # Certificate \"SwissSign Gold CA - G2\"\n-     # Certificate \"COMODO Certification Authority\"\n-     # Certificate \"Certigna\"\n-     # Certificate \"Atos TrustedRoot 2011\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"GTS Root R2\"","status":"published","published":"2026-10-22T20:50:38Z","modified":"2026-10-26T09:32:01.321025267Z","updated_at":"2026-11-02T15:43:54.981307Z"}]}}