Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:0037-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:0037-1

UNKNOWN

Security update for ca-certificates-mozilla

Published Jan 6, 2023

Modified 3 years ago

Fix available

Details

This update for ca-certificates-mozilla fixes the following issues:

Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1

Affected Packages

SUSE:Enterprise Storage 7ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Enterprise Storage 7ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Enterprise Storage 7.1ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Enterprise Storage 7.1ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Micro 5.1ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Micro 5.2ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Micro 5.2ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Micro 5.3ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Module for Development Tools 15 SP3ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Module for Development Tools 15 SP4ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Real Time 15 SP3ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Real Time 15 SP3ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server 15 SP2-LTSSca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server 15 SP2-LTSSca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server 15 SP3-LTSSca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server 15 SP3-LTSSca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Manager Proxy 4.1ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Manager Proxy 4.1ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Manager Proxy 4.2ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Manager Retail Branch Server 4.1ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Manager Retail Branch Server 4.1ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Manager Retail Branch Server 4.2ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Manager Server 4.1ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

SUSE:Manager Server 4.1ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

SUSE:Manager Server 4.2ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

openSUSE:Leap 15.4ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

openSUSE:Leap 15.4ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

openSUSE:Leap Micro 5.2ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

openSUSE:Leap Micro 5.2ca-certificates-mozilla-prebuilt

Fixed in:

2.60-150200.27.1

openSUSE:Leap Micro 5.3ca-certificates-mozilla

Fixed in:

2.60-150200.27.1

References

REPORThttps://bugzilla.suse.com/1206212 REPORThttps://bugzilla.suse.com/1206622 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20230037-1/

Ecosystems

Timeline

PublishedJan 6, 2023

ModifiedJan 6, 2023