Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:0139-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:0139-1

UNKNOWN

Security update for python-certifi

Published Jan 25, 2023

Modified 2 years ago

Fix available

Details

This update for python-certifi fixes the following issues:

remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle certs (bsc#1206212 CVE-2022-23491)
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
Add removeTrustCor.patch

Affected Packages

SUSE:Enterprise Storage 6python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 6python2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 6python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 7python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 7python2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 7python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 7.1python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Enterprise Storage 7.1python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSpython2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSpython2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Micro 5.1python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Micro 5.1python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Micro 5.2python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Micro 5.2python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Micro 5.3python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Micro 5.3python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Real Time 15 SP3python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Real Time 15 SP3python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP1-LTSSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP1-LTSSpython2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP1-LTSSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP2-LTSSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP2-LTSSpython2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP2-LTSSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP3-LTSSpython-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server 15 SP3-LTSSpython3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1python2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2python2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Proxy 4.2python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Proxy 4.2python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Retail Branch Server 4.2python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Retail Branch Server 4.2python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Server 4.2python-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Server 4.2python2-certifi

Fixed in:

2018.1.18-150000.3.3.1

SUSE:Manager Server 4.2python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

openSUSE:Leap 15.4python-certifi

Fixed in:

2018.1.18-150000.3.3.1

openSUSE:Leap 15.4python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

openSUSE:Leap Micro 5.2python-certifi

Fixed in:

2018.1.18-150000.3.3.1

openSUSE:Leap Micro 5.2python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

openSUSE:Leap Micro 5.3python-certifi

Fixed in:

2018.1.18-150000.3.3.1

openSUSE:Leap Micro 5.3python3-certifi

Fixed in:

2018.1.18-150000.3.3.1

References

REPORThttps://bugzilla.suse.com/1206212 WEBhttps://www.suse.com/security/cve/CVE-2022-23491 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20230139-1/

Upstream

Related

Ecosystems

SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3

Timeline

PublishedJan 25, 2023

ModifiedJan 25, 2023