SUSE-SU-2022:4625-1
Security update for ca-certificates-mozilla
SUSE-SU-2022:4625-1 is a vulnerability with no CVSS score yet in ca-certificates-mozilla, published December 27, 2022. No source lists public exploit code. Fixed in ca-certificates-mozilla 2.60-12.40.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.60-12.40.1ca-certificates-mozilla +6 more
Description
This update for ca-certificates-mozilla fixes the following issues:
Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificates-mozillaSUSE:OpenStack Cloud 9 | before 2.60-12.40.1 | 2.60-12.40.1 |
ca-certificates-mozillaSUSE:OpenStack Cloud Crowbar 9 | before 2.60-12.40.1 | 2.60-12.40.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server for SAP Applications 12 SP4 | before 2.60-12.40.1 | 2.60-12.40.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 12 SP2-BCL | before 2.60-12.40.1 | 2.60-12.40.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 12 SP4-LTSS | before 2.60-12.40.1 | 2.60-12.40.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 12 SP5 | before 2.60-12.40.1 | 2.60-12.40.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server for SAP Applications 12 SP5 | before 2.60-12.40.1 | 2.60-12.40.1 |
What each source reports
OSVNo score
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issues:
Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
- Record
SUSE-SU-2022:4625-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.