{"id":"CLSA-2026-1772027218","summary":"Update of ca-certificates","details":"- update to CKBI 2.82 from NSS 3.120\n- updated certificates:\n-     # Certificate \"Entrust.net Premium 2048 Secure Server CA\"\n-     # Certificate \"Entrust Root Certification Authority\"\n-     # Certificate \"ePKI Root Certification Authority\"\n-     # Certificate \"AffirmTrust Commercial\"\n-     # Certificate \"AffirmTrust Networking\"\n-     # Certificate \"AffirmTrust Premium\"\n-     # Certificate \"AffirmTrust Premium ECC\"\n-     # Certificate \"Entrust Root Certification Authority - G2\"\n-     # Certificate \"Entrust Root Certification Authority - EC1\"\n-     # Certificate \"GlobalSign Root CA\"\n-     # Certificate \"Certum Root CA\"\n-     # Certificate \"Comodo AAA Services root\"\n-     # Certificate \"QuoVadis Root CA 2\"\n-     # Certificate \"QuoVadis Root CA 3\"\n-     # Certificate \"XRamp Global CA Root\"\n-     # Certificate \"Go Daddy Class 2 CA\"\n-     # Certificate \"Starfield Class 2 CA\"\n-     # Certificate \"DigiCert Assured ID Root CA\"\n-     # Certificate \"DigiCert Global Root CA\"\n-     # Certificate \"DigiCert High Assurance EV Root CA\"\n-     # Certificate \"SwissSign Gold CA - G2\"\n-     # Certificate \"SecureTrust CA\"\n-     # Certificate \"Secure Global CA\"\n-     # Certificate \"COMODO Certification Authority\"\n-     # Certificate \"COMODO ECC Certification Authority\"\n-     # Certificate \"OISTE WISeKey Global Root GA CA\"\n-     # Certificate \"Certigna\"\n-     # Certificate \"certSIGN ROOT CA\"\n-     # Certificate \"NetLock Arany (Class Gold) Főtanúsítvány\"\n-     # Certificate \"Microsec e-Szigno Root CA 2009\"\n-     # Certificate \"GlobalSign Root CA - R3\"\n-     # Certificate \"Izenpe.com\"\n-     # Certificate \"Go Daddy Root Certificate Authority - G2\"\n-     # Certificate \"Starfield Root Certificate Authority - G2\"\n-     # Certificate \"Starfield Services Root Certificate Authority - G2\"\n-     # Certificate \"Certum Trusted Network CA\"\n-     # Certificate \"TWCA Root Certification Authority\"\n-     # Certificate \"Security Communication RootCA2\"\n-     # Certificate \"Actalis Authentication Root CA\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2 2009\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2 EV 2009\"\n-     # Certificate \"CA Disig Root R2\"\n-     # Certificate \"ACCVRAIZ1\"\n-     # Certificate \"TWCA Global Root CA\"\n-     # Certificate \"TeliaSonera Root CA v1\"\n-     # Certificate \"Atos TrustedRoot 2011\"\n-     # Certificate \"QuoVadis Root CA 1 G3\"\n-     # Certificate \"QuoVadis Root CA 2 G3\"\n-     # Certificate \"QuoVadis Root CA 3 G3\"\n-     # Certificate \"DigiCert Assured ID Root G2\"\n-     # Certificate \"DigiCert Assured ID Root G3\"\n-     # Certificate \"DigiCert Global Root G2\"\n-     # Certificate \"DigiCert Global Root G3\"\n-     # Certificate \"DigiCert Trusted Root G4\"\n-     # Certificate \"COMODO RSA Certification Authority\"\n-     # Certificate \"USERTrust RSA Certification Authority\"\n-     # Certificate \"USERTrust ECC Certification Authority\"\n-     # Certificate \"GlobalSign ECC Root CA - R5\"\n-     # Certificate \"IdenTrust Commercial Root CA 1\"\n-     # Certificate \"CFCA EV ROOT\"\n-     # Certificate \"OISTE WISeKey Global Root GB CA\"\n-     # Certificate \"Certum Trusted Network CA 2\"\n-     # Certificate \"Hellenic Academic and Research Institutions RootCA 2015\"\n-     # Certificate \"Hellenic Academic and Research Institutions ECC RootCA 2015\"\n-     # Certificate \"AC RAIZ FNMT-RCM\"\n-     # Certificate \"Amazon Root CA 2\"\n-     # Certificate \"Amazon Root CA 4\"\n-     # Certificate \"GDCA TrustAUTH R5 ROOT\"\n-     # Certificate \"SSL.com Root Certification Authority RSA\"\n-     # Certificate \"SSL.com Root Certification Authority ECC\"\n-     # Certificate \"SSL.com EV Root Certification Authority RSA R2\"\n-     # Certificate \"SSL.com EV Root Certification Authority ECC\"\n-     # Certificate \"GlobalSign Root CA - R6\"\n-     # Certificate \"OISTE WISeKey Global Root GC CA\"\n-     # Certificate \"UCA Global G2 Root\"\n-     # Certificate \"UCA Extended Validation Root\"\n-     # Certificate \"Certigna Root CA\"\n-     # Certificate \"emSign ECC Root CA - G3\"\n-     # Certificate \"emSign ECC Root CA - C3\"\n-     # Certificate \"Entrust Root Certification Authority - G4\"\n-     # Certificate \"e-Szigno Root CA 2017\"\n-     # Certificate \"Trustwave Global Certification Authority\"\n-     # Certificate \"Trustwave Global ECC P256 Certification Authority\"\n-     # Certificate \"Trustwave Global ECC P384 Certification Authority\"\n-     # Certificate \"GLOBALTRUST 2020\"\n-     # Certificate \"Certum EC-384 CA\"\n-     # Certificate \"Certum Trusted Root CA\"\n-     # Certificate \"Autoridad de Certificacion Firmaprofesional CIF A62634068\"\n-     # Certificate \"GlobalSign ECC Root CA - R4\"\n-     # Certificate \"Security Communication ECC RootCA1\"\n-     # Certificate \"BJCA Global Root CA1\"\n-     # Certificate \"BJCA Global Root CA2\"\n- removed certificates:\n-     # Certificate \"Baltimore CyberTrust Root\"\n-     # Certificate \"Certification Authority of WoSign G2\"\n-     # Certificate \"CA WoSign ECC Root\"\n-     # Certificate \"CCA India 2015 SPL\"\n-     # Certificate \"A-Trust-Root-05\"\n-     # Certificate \"A-Trust-Qual-02\"\n-     # Certificate \"Certification Authority of WoSign\"\n-     # Certificate \"CA 沃通根证书\"\n-     # Certificate \"E-Tugra Certification Authority\"\n-     # Certificate \"ADOCA02\"\n-     # Certificate \"StartCom Certification Authority G2\"\n-     # Certificate \"Macao Post eSignTrust Root Certification Authority (G02)\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v2\"\n-     # Certificate \"LuxTrust Global Root\"\n-     # Certificate \"AC1 RAIZ MTIN\"\n-     # Certificate \"CCA India 2011\"\n-     # Certificate \"China Internet Network Information Center EV Certificates Root\"\n-     # Certificate \"SITHS CA v3\"\n-     # Certificate \"ANF Server CA\"\n-     # Certificate \"KEYNECTIS ROOT CA\"\n-     # Certificate \"I.CA - Standard Certification Authority, 09/2009\"\n-     # Certificate \"I.CA - Qualified Certification Authority, 09/2009\"\n-     # Certificate \"VI Registru Centras RCSC (RootCA)\"\n-     # Certificate \"Autoridade Certificadora Raiz Brasileira v1\"\n-     # Certificate \"Actalis Authentication CA G1\"\n-     # Certificate \"A-Trust-Qual-03\"\n-     # Certificate \"AddTrust External CA Root\"\n-     # Certificate \"StartCom Certification Authority\"\n-     # Certificate \"Autoridad Certificadora Raiz de la Secretaria de Economia\"\n-     # Certificate \"Chambers of Commerce Root - 2008\"\n-     # Certificate \"Global Chambersign Root - 2008\"\n-     # Certificate \"CNNIC ROOT\"\n-     # Certificate \"Staat der Nederlanden Root CA - G2\"\n-     # Certificate \"CA Disig\"\n-     # Certificate \"I.CA - Qualified root certificate\"\n-     # Certificate \"I.CA - Standard root certificate\"\n-     # Certificate \"e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi\"\n-     # Certificate \"Japanese Government\"\n-     # Certificate \"AdminCA-CD-T01\"\n-     # Certificate \"Admin-Root-CA\"\n-     # Certificate \"TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3\"\n-     # Certificate \"Halcom CA FO\"\n-     # Certificate \"Halcom CA PO 2\"\n-     # Certificate \"ACNLB\"\n-     # Certificate \"state-institutions\"\n-     # Certificate \"D-TRUST Root Class 2 CA 2007\"\n-     # Certificate \"D-TRUST Root Class 3 CA 2007\"\n-     # Certificate \"Root CA Generalitat Valenciana\"\n-     # Certificate \"EBG Elektronik Sertifika Hizmet Sağlayıcısı\"\n-     # Certificate \"VAS Latvijas Pasts SSI(RCA)\"\n-     # Certificate \"ANCERT Certificados CGN\"\n-     # Certificate \"ANCERT Certificados Notariales\"\n-     # Certificate \"ANCERT Corporaciones de Derecho Publico\"\n-     # Certificate \"Certipost E-Trust TOP Root CA\"\n-     # Certificate \"Certipost E-Trust Primary Qualified CA\"\n-     # Certificate \"Certipost E-Trust Primary Normalised CA\"\n-     # Certificate \"Cybertrust Global Root\"\n-     # Certificate \"GlobalSign\"\n-     # Certificate \"IGC/A\"\n-     # Certificate \"Swisscom Root CA 1\"\n-     # Certificate \"Microsec e-Szigno Root CA\"\n-     # Certificate \"LGPKI\"\n-     # Certificate \"A-Trust-nQual-03\"\n-     # Certificate \"KISA RootCA 1\"\n-     # Certificate \"NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado\"\n-     # Certificate \"Staat der Nederlanden Root CA\"\n-     # Certificate \"Juur-SK\"\n-     # Certificate \"SECOM Trust.net\"\n-     # Certificate \"Chambers of Commerce Root\"\n-     # Certificate \"Global Chambersign Root\"\n-     # Certificate \"GeoTrust Global CA\"\n-     # Certificate \"GeoTrust Global CA 2\"\n-     # Certificate \"QuoVadis Root Certification Authority\"\n-     # Certificate \"Sonera Class2 CA\"\n-     # Certificate \"VeriSign, Inc.\"\n-     # Certificate \"Microsoft Root Authority\"\n-     # Certificate \"Microsoft Root Certificate Authority\"\n-     # Certificate \"GTE CyberTrust Global Root\"\n-     # Certificate \"Thawte Server CA\"\n-     # Certificate \"Thawte Premium Server CA\"\n-     # Certificate \"Equifax Secure Global eBusiness CA-1\"\n-     # Certificate \"Equifax\"\n-     # Certificate \"Class 1 Primary CA\"\n-     # Certificate \"UTN-USERFirst-Object\"\n-     # Certificate \"CHAMBERS OF COMMERCE ROOT - 2016\"\n- added certificates:\n-     # Certificate \"TWCA CYBER Root CA\"\n-     # Certificate \"TWCA Global Root CA G2\"\n-     # Certificate \"SecureSign Root CA12\"\n-     # Certificate \"SecureSign Root CA14\"\n-     # Certificate \"SecureSign Root CA15\"\n-     # Certificate \"D-TRUST BR Root CA 2 2023\"\n-     # Certificate \"TrustAsia SMIME ECC Root CA\"\n-     # Certificate \"TrustAsia SMIME RSA Root CA\"\n-     # Certificate \"TrustAsia TLS ECC Root CA\"\n-     # Certificate \"TrustAsia TLS RSA Root CA\"\n-     # Certificate \"D-TRUST EV Root CA 2 2023\"\n-     # Certificate \"SwissSign RSA SMIME Root CA 2022 - 1\"\n-     # Certificate \"SwissSign RSA TLS Root CA 2022 - 1\"\n-     # Certificate \"OISTE Client Root ECC G1\"\n-     # Certificate \"OISTE Client Root RSA G1\"\n-     # Certificate \"OISTE Server Root ECC G1\"\n-     # Certificate \" OISTE Server Root RSA G1\"","modified":"2026-06-01T00:32:41.823765239Z","published":"2026-02-25T13:47:02Z","references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1772027218.html"}],"affected":[{"package":{"name":"ca-certificates","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/ca-certificates?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.82_v8.0.303-91.4.el9_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1772027218.json"}}],"schema_version":"1.7.5"}