SUSE-SU-2023:0003-1
Security update for ca-certificates-mozilla
SUSE-SU-2023:0003-1 is a vulnerability with no CVSS score yet in ca-certificates-mozilla, published January 2, 2023. No source lists public exploit code. Fixed in ca-certificates-mozilla 2.60-150000.4.38.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.60-150000.4.38.1ca-certificates-mozilla +7 more
Description
This update for ca-certificates-mozilla fixes the following issues:
Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificates-mozillaSUSE:Linux Enterprise High Performance Computing 15-ESPOS | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Linux Enterprise High Performance Computing 15-LTSS | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 15-LTSS | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 15 SP1-LTSS | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server for SAP Applications 15 | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
ca-certificates-mozillaSUSE:Enterprise Storage 6 | before 2.60-150000.4.38.1 | 2.60-150000.4.38.1 |
What each source reports
OSVNo score
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issues:
Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
- Record
SUSE-SU-2023:0003-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.