{"id":"CLSA-2024-1730917387","summary":"Update of ca-certificates","details":"- update to CKBI 2.69 from NSS 3.103\n- updated certificates:\n-     # Certificate \"GLOBALTRUST 2020\"\n-     # Certificate \"Autoridad de Certificacion Firmaprofesional CIF A62634068\"\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Baltimore CyberTrust Root\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"Certum Root CA\"\n-     # Certificate \"Comodo AAA Services root\"\n-     # Certificate \"QuoVadis Root CA 2\"\n-     # Certificate \"QuoVadis Root CA 3\"\n-     # Certificate \"XRamp Global CA Root\"\n-     # Certificate \"Go Daddy Class 2 CA\"\n-     # Certificate \"Starfield Class 2 CA\"\n-     # Certificate \"DigiCert Assured ID Root CA\"\n-     # Certificate \"DigiCert Global Root CA\"\n-     # Certificate \"DigiCert High Assurance EV Root CA\"\n-     # Certificate \"SwissSign Gold CA - G2\"\n-     # Certificate \"SwissSign Silver CA - G2\"\n-     # Certificate \"SecureTrust CA\"\n-     # Certificate \"Secure Global CA\"\n-     # Certificate \"COMODO ECC Certification Authority\"\n-     # Certificate \"OISTE WISeKey Global Root GA CA\"\n-     # Certificate \"Certigna\"\n-     # Certificate \"ePKI Root Certification Authority\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"SecureSign RootCA11\"\n-     # Certificate \"Microsec e-Szigno Root CA 2009\"\n-     # Certificate \"GlobalSign Root CA - R3\"\n-     # Certificate \"Go Daddy Root Certificate Authority - G2\"\n-     # Certificate \"Starfield Root Certificate Authority - G2\"\n-     # Certificate \"Starfield Services Root Certificate Authority - G2\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Certum Trusted Network CA\"\n-     # Certificate \"TWCA Root Certification Authority\"\n-     # Certificate \"Security Communication RootCA2\"\n-     # Certificate \"Actalis Authentication Root CA\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2 2009\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2 EV 2009\"\n-     # Certificate \"CA Disig Root R2\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"TWCA Global Root CA\"\n-     # Certificate \"Atos TrustedRoot 2011\"\n-     # Certificate \"QuoVadis Root CA 1 G3\"\n-     # Certificate \"QuoVadis Root CA 2 G3\"\n-     # Certificate \"QuoVadis Root CA 3 G3\"\n-     # Certificate \"DigiCert Assured ID Root G2\"\n-     # Certificate \"DigiCert Assured ID Root G3\"\n-     # Certificate \"DigiCert Global Root G2\"\n-     # Certificate \"DigiCert Global Root G3\"\n-     # Certificate \"DigiCert Trusted Root G4\"\n-     # Certificate \"COMODO RSA Certification Authority\"\n-     # Certificate \"USERTrust RSA Certification Authority\"\n-     # Certificate \"USERTrust ECC Certification Authority\"\n-     # Certificate \"GlobalSign ECC Root CA - R5\"\n-     # Certificate \"IdenTrust Commercial Root CA 1\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"CFCA EV ROOT\"\n-     # Certificate \"OISTE WISeKey Global Root GB CA\"\n-     # Certificate \"Certum Trusted Network CA 2\"\n-     # Certificate \"Hellenic Academic and Research Institutions RootCA 2015\"\n-     # Certificate \"Hellenic Academic and Research Institutions ECC RootCA 2015\"\n-     # Certificate \"Amazon Root CA 2\"\n-     # Certificate \"SSL.com Root Certification Authority RSA\"\n-     # Certificate \"SSL.com Root Certification Authority ECC\"\n-     # Certificate \"SSL.com EV Root Certification Authority RSA R2\"\n-     # Certificate \"SSL.com EV Root Certification Authority ECC\"\n-     # Certificate \"GlobalSign Root CA - R6\"\n-     # Certificate \"OISTE WISeKey Global Root GC CA\"\n-     # Certificate \"UCA Global G2 Root\"\n-     # Certificate \"UCA Extended Validation Root\"\n-     # Certificate \"Certigna Root CA\"\n-     # Certificate \"emSign ECC Root CA - G3\"\n-     # Certificate \"emSign ECC Root CA - C3\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"e-Szigno Root CA 2017\"\n-     # Certificate \"Trustwave Global Certification Authority\"\n-     # Certificate \"Trustwave Global ECC P256 Certification Authority\"\n-     # Certificate \"Trustwave Global ECC P384 Certification Authority\"\n-     # Certificate \"Certum EC-384 CA\"\n-     # Certificate \"Certum Trusted Root CA\"\n-     # Certificate \"Security Communication RootCA3\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n- removed certificates:\n-     # Certificate \"Security Communication Root CA\"\n-     # Certificate \"Camerfirma Chambers of Commerce Root\"\n-     # Certificate \"Certification Authority of WoSign G2\"\n-     # Certificate \"CA WoSign ECC Root\"\n-     # Certificate \"A-Trust-Root-05\"\n-     # Certificate \"A-Trust-Qual-02\"\n-     # Certificate \"Certification Authority of WoSign\"\n-     # Certificate \"CA 沃通根证书\"\n-     # Certificate \"ADOCA02\"\n-     # Certificate \"StartCom Certification Authority G2\"\n-     # Certificate \"Macao Post eSignTrust Root Certification Authority (G02)\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v2\"\n-     # Certificate \"LuxTrust Global Root\"\n-     # Certificate \"AC1 RAIZ MTIN\"\n-     # Certificate \"CCA India 2011\"\n-     # Certificate \"China Internet Network Information Center EV Certificates Root\"\n-     # Certificate \"SITHS CA v3\"\n-     # Certificate \"ANF Server CA\"\n-     # Certificate \"KEYNECTIS ROOT CA\"\n-     # Certificate \"I.CA - Standard Certification Authority, 09/2009\"\n-     # Certificate \"I.CA - Qualified Certification Authority, 09/2009\"\n-     # Certificate \"VI Registru Centras RCSC (RootCA)\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v1\"\n-     # Certificate \"Actalis Authentication CA G1\"\n-     # Certificate \"A-Trust-Qual-03\"\n-     # Certificate \"AddTrust External CA Root\"\n-     # Certificate \"StartCom Certification Authority\"\n-     # Certificate \"CNNIC ROOT\"\n-     # Certificate \"Staat der Nederlanden Root CA - G2\"\n-     # Certificate \"CA Disig\"\n-     # Certificate \"I.CA - Qualified root certificate\"\n-     # Certificate \"I.CA - Standard root certificate\"\n-     # Certificate \"e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi\"\n-     # Certificate \"Japanese Government\"\n-     # Certificate \"AdminCA-CD-T01\"\n-     # Certificate \"Admin-Root-CA\"\n-     # Certificate \"TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3\"\n-     # Certificate \"Halcom CA FO\"\n-     # Certificate \"Halcom CA PO 2\"\n-     # Certificate \"ACNLB\"\n-     # Certificate \"state-institutions\"\n-     # Certificate \"D-TRUST Root Class 2 CA 2007\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2007\"\n-     # Certificate \"Root CA Generalitat Valenciana\"\n-     # Certificate \"EBG Elektronik Sertifika Hizmet Sağlayıcısı\"\n-     # Certificate \"ANCERT Certificados CGN\"\n-     # Certificate \"ANCERT Certificados Notariales\"\n-     # Certificate \"ANCERT Corporaciones de Derecho Publico\"\n-     # Certificate \"Certipost E-Trust Primary Qualified CA\"\n-     # Certificate \"Certipost E-Trust Primary Normalised CA\"\n-     # Certificate \"Cybertrust Global Root\"\n-     # Certificate \"IGC/A\"\n-     # Certificate \"Microsec e-Szigno Root CA\"\n-     # Certificate \"LGPKI\"\n-     # Certificate \"NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado\"\n-     # Certificate \"Staat der Nederlanden Root CA\"\n-     # Certificate \"Juur-SK\"\n-     # Certificate \"Global Chambersign Root\"\n-     # Certificate \"GeoTrust Global CA\"\n-     # Certificate \"GeoTrust Global CA 2\"\n-     # Certificate \"QuoVadis Root Certification Authority\"\n-     # Certificate \"Sonera Class2 CA\"\n-     # Certificate \"VeriSign, Inc.\"\n-     # Certificate \"Microsoft Root Authority\"\n-     # Certificate \"Microsoft Root Certificate Authority\"\n-     # Certificate \"GTE CyberTrust Global Root\"\n-     # Certificate \"Thawte Server CA\"\n-     # Certificate \"Thawte Premium Server CA\"\n-     # Certificate \"Equifax Secure Global eBusiness CA-1\"\n-     # Certificate \"Equifax\"\n-     # Certificate \"Class 1 Primary CA\"\n-     # Certificate \"UTN-USERFirst-Object\"\n-     # Certificate \"CHAMBERS OF COMMERCE ROOT - 2016\"\n-     # Certificate \"E-Tugra Global Root CA RSA v3\"\n-     # Certificate \"E-Tugra Global Root CA ECC v3\"\n-     # Certificate \"Tunisian Root Certificate Authority - TunRootCA2\"\n- added certificates:\n-     # Certificate \"D-Trust SBR Root CA 1 2022\"\n-     # Certificate \"D-Trust SBR Root CA 2 2022\"\n-     # Certificate \"Telekom Security SMIME ECC Root 2021\"\n-     # Certificate \"Telekom Security TLS ECC Root 2020\"\n-     # Certificate \"Telekom Security SMIME RSA Root 2023\"\n-     # Certificate \"Telekom Security TLS RSA Root 2023\"\n-     # Certificate \"FIRMAPROFESIONAL CA ROOT-A WEB\"\n- remove duplicated certificate record:\n-     # Certificate \"Autoridad de Certificacion Firmaprofesional CIF A62634068\"","modified":"2026-06-01T00:30:25.840840257Z","published":"2024-11-06T18:23:13Z","references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1730917387.html"}],"affected":[{"package":{"name":"ca-certificates","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/ca-certificates?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.2.69_v7.0.306-90.1.el9_2.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2024-1730917387.json"}}],"schema_version":"1.7.5"}