SUSE-SU-2023:0139-1

UNKNOWN

Security update for python-certifi

Published Jan 25, 2023

Modified 3 years ago

Fix available

Details

This update for python-certifi fixes the following issues:

remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle certs (bsc#1206212 CVE-2022-23491)
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
Add removeTrustCor.patch

Affected Packages

python-certifi

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Fixed in:

2018.1.18-150000.3.3.1

python2-certifi

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP1-LTSS

Fixed in:

2018.1.18-150000.3.3.1

python3-certifi

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Fixed in:

2018.1.18-150000.3.3.1

References

REPORT

https://bugzilla.suse.com/1206212

WEB

https://www.suse.com/security/cve/CVE-2022-23491

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230139-1/

Upstream

CVE-2022-23491

Ecosystems(24)

SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Timeline

PublishedJan 25, 2023

ModifiedJan 25, 2023

SUSE-SU-2023:0139-1 | Mondoo Vulnerability Intelligence