CLSA-2026:1792702397

[CLSA-2026:1792702397] Update of ca-certificates

Type:

bugfix

Severity:

None

Release date:

2026-10-24 17:01:24 UTC

Description:

- update to CKBI 2.92 from NSS 3.131.1
- updated certificates:
-     # Certificate "OISTE Server Root RSA G1"
-     # Certificate "Amazon Root CA 1"
-     # Certificate "Amazon Root CA 2"
-     # Certificate "Amazon Root CA 3"
-     # Certificate "Amazon Root CA 4"
-     # Certificate "GlobalSign ECC Root CA - R4"
-     # Certificate "GTS Root R1"
-     # Certificate "GTS Root R3"
-     # Certificate "GTS Root R4"
-     # Certificate "TrustAsia Global Root CA G3"
-     # Certificate "TrustAsia Global Root CA G4"
- removed certificates:
-     # Certificate "CFCA GT CA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "emSign ECC Root CA - G3"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
- added certificates:
-     # Certificate "e-Szigno TLS Root CA 2023"
-     # Certificate "SecureSign Root CA16"
-     # Certificate "SECOM TLS RSA Root CA 2024"
-     # Certificate "SECOM TLS ECC Root CA 2024"
-     # Certificate "SECOM SMIME RSA Root CA 2024"
-     # Certificate "Telia EC Email Root CA v3"
-     # Certificate "Telia EC TLS Root CA v3"
-     # Certificate "Telia RSA Email Root CA v3"
-     # Certificate "Telia RSA TLS Root CA v3"
- distrusted certificates:
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "ACEDICOM Root"
-     # Certificate "AffirmTrust Networking"
-     # Certificate "America Online Root Certification Authority 1"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ComSign CA"
-     # Certificate "ComSign Secured CA"
-     # Certificate "EC-ACC"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "Entrust Root Certification Authority"
-     # Certificate "Hellenic Academic and Research Institutions RootCA 2011"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "Secure Global CA"
-     # Certificate "SecureSign RootCA11"
-     # Certificate "SecureTrust CA"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "SwissSign Platinum CA - G2"
-     # Certificate "SwissSign Silver CA - G2"
-     # Certificate "TeliaSonera Root CA v1"
-     # Certificate "XRamp Global CA Root"
-     # Certificate "certSIGN ROOT CA"
-     # Certificate "ePKI Root Certification Authority"
- no longer trusted for TLS server authentication:
-     # Certificate "QuoVadis Root CA 2"
-     # Certificate "QuoVadis Root CA 3"
-     # Certificate "DigiCert Assured ID Root CA"
-     # Certificate "DigiCert Global Root CA"
-     # Certificate "DigiCert High Assurance EV Root CA"
-     # Certificate "SwissSign Gold CA - G2"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Certigna"
-     # Certificate "Atos TrustedRoot 2011"
-     # Certificate "Entrust Root Certification Authority - G2"
-     # Certificate "Entrust Root Certification Authority - EC1"
-     # Certificate "GTS Root R2"

Updated packages:

ca-certificates-2026.2.92_v7.0.306-72.el7_9.tuxcare.els1.noarch.rpm
sha:e32761236e527e3d112d1b60063dc094c6f43b3acb4873160628f25d40dd0a6d

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.