{"id":"SUSE-SU-2023:0003-1","aliases":[],"status":"published","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)\n  Removed CAs:\n  - Global Chambersign Root\n  - EC-ACC\n  - Network Solutions Certificate Authority\n  - Staat der Nederlanden EV Root CA\n  - SwissSign Platinum CA - G2\n  Added CAs:\n  - DIGITALSIGN GLOBAL ROOT ECDSA CA\n  - DIGITALSIGN GLOBAL ROOT RSA CA\n  - Security Communication ECC RootCA1\n  - Security Communication RootCA3\n  Changed trust:\n  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)\n\n- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'\n  and it is not clear how many certs were issued for SSL middleware by TrustCor:\n  - TrustCor RootCert CA-1\n  - TrustCor RootCert CA-2\n  - TrustCor ECA-1","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-01-02T08:54:23Z","modified":"2023-01-02T08:54:23Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"ca-certificates-mozilla","fixed_in":["2.60-150000.4.38.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150000.4.38.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230003-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206212","tags":["report"]},{"url":"https://bugzilla.suse.com/1206622","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2023:0003-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)\n  Removed CAs:\n  - Global Chambersign Root\n  - EC-ACC\n  - Network Solutions Certificate Authority\n  - Staat der Nederlanden EV Root CA\n  - SwissSign Platinum CA - G2\n  Added CAs:\n  - DIGITALSIGN GLOBAL ROOT ECDSA CA\n  - DIGITALSIGN GLOBAL ROOT RSA CA\n  - Security Communication ECC RootCA1\n  - Security Communication RootCA3\n  Changed trust:\n  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)\n\n- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'\n  and it is not clear how many certs were issued for SSL middleware by TrustCor:\n  - TrustCor RootCert CA-1\n  - TrustCor RootCert CA-2\n  - TrustCor ECA-1\n","status":"published","published":"2023-01-02T08:54:23Z","modified":"2023-01-02T08:54:23Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}