SUSE-SU-2023:0037-1
Security update for ca-certificates-mozilla
No scoreFix available
SUSE-SU-2023:0037-1 is a vulnerability with no CVSS score yet in ca-certificates-mozilla, published January 6, 2023. No source lists public exploit code. Fixed in ca-certificates-mozilla 2.60-150200.27.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.60-150200.27.1ca-certificates-mozilla +41 more
Description
This update for ca-certificates-mozilla fixes the following issues:
- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'
and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificates-mozillaSUSE:Linux Enterprise Micro 5.3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Module for Basesystem 15 SP3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Module for Basesystem 15 SP4 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Module for Development Tools 15 SP3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Module for Development Tools 15 SP4 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Real Time 15 SP3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Real Time 15 SP3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 15 SP2-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Server 15 SP2-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server 15 SP3-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Server 15 SP3-LTSS | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Server for SAP Applications 15 SP2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Server for SAP Applications 15 SP3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Manager Proxy 4.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Manager Proxy 4.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Manager Proxy 4.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Manager Retail Branch Server 4.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Manager Retail Branch Server 4.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Manager Retail Branch Server 4.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Manager Server 4.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Manager Server 4.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Manager Server 4.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Micro 5.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Linux Enterprise Micro 5.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Linux Enterprise Micro 5.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Enterprise Storage 7 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Enterprise Storage 7 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaSUSE:Enterprise Storage 7.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltSUSE:Enterprise Storage 7.1 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaopenSUSE:Leap Micro 5.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltopenSUSE:Leap Micro 5.2 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaopenSUSE:Leap Micro 5.3 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozillaopenSUSE:Leap 15.4 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
ca-certificates-mozilla-prebuiltopenSUSE:Leap 15.4 | before 2.60-150200.27.1 | 2.60-150200.27.1 |
What each source reports
OSVNo score
Security update for ca-certificates-mozilla
This update for ca-certificates-mozilla fixes the following issues:
- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
Removed CAs:
- Global Chambersign Root
- EC-ACC
- Network Solutions Certificate Authority
- Staat der Nederlanden EV Root CA
- SwissSign Platinum CA - G2 Added CAs:
- DIGITALSIGN GLOBAL ROOT ECDSA CA
- DIGITALSIGN GLOBAL ROOT RSA CA
- Security Communication ECC RootCA1
- Security Communication RootCA3 Changed trust:
- TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'
and it is not clear how many certs were issued for SSL middleware by TrustCor:
- TrustCor RootCert CA-1
- TrustCor RootCert CA-2
- TrustCor ECA-1
- Record
SUSE-SU-2023:0037-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.