SUSE-SU-2026:20696-1

Security update for ca-certificates-mozilla

No scoreFix available

SUSE-SU-2026:20696-1 is a vulnerability with no CVSS score yet in ca-certificates-mozilla, published March 4, 2026. No source lists public exploit code. Fixed in ca-certificates-mozilla 2.84-1.1.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 2.84-1.1ca-certificates-mozilla

Description

This update for ca-certificates-mozilla fixes the following issues:

Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002)
- Removed:
  - Baltimore CyberTrust Root
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - DigiNotar Root CA
- Added:
  - e-Szigno TLS Root CA 2023
  - OISTE Client Root ECC G1
  - OISTE Client Root RSA G1
  - OISTE Server Root ECC G1
  - OISTE Server Root RSA G1
  - SwissSign RSA SMIME Root CA 2022 - 1
  - SwissSign RSA TLS Root CA 2022 - 1
  - TrustAsia SMIME ECC Root CA
  - TrustAsia SMIME RSA Root CA
  - TrustAsia TLS ECC Root CA
  - TrustAsia TLS RSA Root CA

Affected packages

Affected packages
Package	Affected	Fixed
`ca-certificates-mozilla` SUSE:Linux Micro 6.0	before 2.84-1.1	2.84-1.1

What each source reports

OSVNo score

Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues:

Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002)
- Removed:
  - Baltimore CyberTrust Root
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - DigiNotar Root CA
- Added:
  - e-Szigno TLS Root CA 2023
  - OISTE Client Root ECC G1
  - OISTE Client Root RSA G1
  - OISTE Server Root ECC G1
  - OISTE Server Root RSA G1
  - SwissSign RSA SMIME Root CA 2022 - 1
  - SwissSign RSA TLS Root CA 2022 - 1
  - TrustAsia SMIME ECC Root CA
  - TrustAsia SMIME RSA Root CA
  - TrustAsia TLS ECC Root CA
  - TrustAsia TLS RSA Root CA

Record: SUSE-SU-2026:20696-1
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

Description

Affected packages

What each source reports

History

References