Every CVESearch/Get API key

SUSE-SU-2025:20307-1

Security update for ca-certificates-mozilla

No scoreFix available

SUSE-SU-2025:20307-1 is a vulnerability with no CVSS score yet in ca-certificates-mozilla, published May 12, 2025. No source lists public exploit code. Fixed in ca-certificates-mozilla 2.74-slfo.1.1_1.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.74-slfo.1.1_1.1ca-certificates-mozilla

Description

This update for ca-certificates-mozilla fixes the following issues:

Update to 2.74 state of Mozilla SSL root CAs:

Removed:

  • SwissSign Silver CA - G2

Added:

  • D-TRUST BR Root CA 2 2023
  • D-TRUST EV Root CA 2 2023

Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798):

Removed:

  • SecureSign RootCA11
  • Security Communication RootCA3

Added:

  • TWCA CYBER Root CA
  • TWCA Global Root CA G2
  • SecureSign Root CA12
  • SecureSign Root CA14
  • SecureSign Root CA15

Affected packages

Affected packages
PackageAffectedFixed
ca-certificates-mozilla
SUSE:Linux Micro 6.1
before 2.74-slfo.1.1_1.1
2.74-slfo.1.1_1.1

What each source reports

OSVNo score

Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues:

Update to 2.74 state of Mozilla SSL root CAs:

Removed:

  • SwissSign Silver CA - G2

Added:

  • D-TRUST BR Root CA 2 2023
  • D-TRUST EV Root CA 2 2023

Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798):

Removed:

  • SecureSign RootCA11
  • Security Communication RootCA3

Added:

  • TWCA CYBER Root CA
  • TWCA Global Root CA G2
  • SecureSign Root CA12
  • SecureSign Root CA14
  • SecureSign Root CA15
Record
SUSE-SU-2025:20307-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open