-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Jul 2026 10:50:29 +0200 Source: ca-certificates Architecture: source Version: 20250419~deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Julien Cristau <jcristau@debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 981663 1023945 1031490 1032916 1050112 1058658 1063093 1067042 Changes: ca-certificates (20250419~deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by LTS team * Backport from trixie . [ Julien Cristau ] . * Update Mozilla certificate authority bundle to version 2.74. The following certificate authorities were added (+): + D-TRUST BR Root CA 2 2023 + D-TRUST EV Root CA 2 2023 The following certificate authorities were removed (-): - Entrust Root Certification Authority - G4 - SecureSign RootCA11 - Security Communication RootCA3 - SwissSign Silver CA - G2 * Update Mozilla certificate authority bundle to version 2.70. The following certificate authorities were added (+): + Telekom Security TLS ECC Root 2020 + Telekom Security TLS RSA Root 2023 + FIRMAPROFESIONAL CA ROOT-A WEB + TWCA CYBER Root CA + SecureSign Root CA12 + SecureSign Root CA14 + SecureSign Root CA15 The following certificate authorities were removed (-): - Security Communication Root CA (closes: #1063093) * Update Mozilla certificate authority bundle to version 2.64 The following certificate authorities were added (+): + Atos TrustedRoot Root CA ECC TLS 2021 + Atos TrustedRoot Root CA RSA TLS 2021 + BJCA Global Root CA1 + BJCA Global Root CA2 + CommScope Public Trust ECC Root-01 + CommScope Public Trust ECC Root-02 + CommScope Public Trust RSA Root-01 + CommScope Public Trust RSA Root-02 + Sectigo Public Server Authentication Root E46 + Sectigo Public Server Authentication Root R46 + SSL.com TLS ECC Root CA 2022 + SSL.com TLS RSA Root CA 2022 + TrustAsia Global Root CA G3 + TrustAsia Global Root CA G4 The following certificate authorities were removed (-): - Autoridad de Certificacion Firmaprofesional CIF A62634068 - E-Tugra Certification Authority (closes: #1032916) - E-Tugra Global Root CA ECC v3 - E-Tugra Global Root CA RSA v3 - Hongkong Post Root CA 1 - TrustCor ECA-1 - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 (closes: #1023945) * Add Romanian debconf translation, thanks to Remus-Gabriel Chelu. Closes: #1067042, #1031490. . [ Jeffrey Walton ] . * update-ca-certificates man page updates * fix shellcheck warnings (closes: #1058658, #981663) . [ Gioele Barabucci ] * Use standard dh sequence (closes: #1050112) Checksums-Sha1: 6c83f0c83f6589e5137f5000e2108c9a0f7912b3 1769 ca-certificates_20250419~deb12u1.dsc ab7ed787f56c6ca86d0022213279936ddd2af735 277244 ca-certificates_20250419~deb12u1.tar.xz c5d52ae3ad307424e91ae2ba4a6e12644b4ab7a2 5867 ca-certificates_20250419~deb12u1_source.buildinfo Checksums-Sha256: 72339e810ef8237a4c346540b52baf49607172cc849c2680328a608ce0f6a34b 1769 ca-certificates_20250419~deb12u1.dsc b2a431cbab9a0ece921cffacbe238dc27a3e382ad4a1806dc8968c5eff30471d 277244 ca-certificates_20250419~deb12u1.tar.xz 58b9015adaef6cf31e6e5c0478d4982f093a76055b47c82f8051e7d6308cbe96 5867 ca-certificates_20250419~deb12u1_source.buildinfo Files: 3537b98e32df9872cac10658b4d96e72 1769 misc optional ca-certificates_20250419~deb12u1.dsc 65ae5e2dd132625d0c3d402d77e3a4cc 277244 misc optional ca-certificates_20250419~deb12u1.tar.xz 4fa03cd0579b4eb96a52e21da7a907d3 5867 misc optional ca-certificates_20250419~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmp451kACgkQADoaLapB CF/q/g/9GR3jOlve76FOz3rb7nKJpBkGG9UxRHqdeb0CsmXmsutBUQWXxv2LJ23n LAKzWqaNgbWHkUOjwUEpUVIvebbcDF3qL+h+ewAuntsVWaSgATBgQZzlpLAHStvh xrBDMLEBUBwYgBC6MMATeabMSgqMAuSTXZ7MuTc21ZHFrqCzNQM+Tom5VoOUKhTI PW8MPpuzMbuYj8994t81pqC4VxQCqRGe1Wze5pCebAz7FSdLMsI794jnw/aKFAY6 9Fjf/C/drqzqcliq8tWa71yRTJEgKYwsxXvgoCeLEADACCWGiN9FRa5J2cCBXdhN S7cWKdq91YxI1WmJS+N6o07PowZrzU8+S1TB4wluLGGY2A0+x5L70iF6j9IIZ/i9 1zyPST+4NX5zEHSH5TQuAorqagT23WgFnheraSPu9oZTcheizqkre1VfZBvw/SFl l7Z0T7DKVWGXOLDZHWV0+Ep06aUdpwiFJombe6+Tk86H9SM9Mj5oY+dG3D7c0fjc ruZ3C+zhzkgflGPfUjysX/8dABa5fFspIEElhMMtxY9pJtLmRDmB+YNbD0OJYjeU NXBCkrk5X4IaBh4t9jGxWidT7eQGdmKUWLpmLwUpEwFC/2ibQkdPS3fBbe1EB4A4 AUg2jEboEUERf5lVAYXnpZE5qO9SrKGMurZ2GvdMzNcjiNI7Zu8= =FvU8 -----END PGP SIGNATURE-----