Detections
Analytics

EulerOS 2.0 SP13 : ca-certificates (EulerOS-SA-2026-3010)

high Nessus Plugin ID 332825

Synopsis

The remote EulerOS host is missing a security update.

Description

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

 Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store.
 `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified 'long- running and unresolved compliance issues.'(CVE-2024-39689)

Tenable has extracted the preceding description block directly from the EulerOS ca-certificates security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected ca-certificates packages.

See Also

http://www.nessus.org/u?175b6bc1

Plugin Details

Severity: High

ID: 332825

File Name: EulerOS_SA-2026-3010.nasl

Version: 1.1

Type: Local

Published: 8/6/2026

Updated: 8/6/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.73

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N

CVSS Score Source: CVE-2024-39689

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:ca-certificates

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp

Excluded KB Items: Host/EulerOS/uvp_version

Exploit Ease: No known exploits are available

Patch Publication Date: 8/6/2026

Vulnerability Publication Date: 7/5/2024

Reference Information

CVE: CVE-2024-39689