{"id":"SUSE-SU-2023:0037-1","aliases":[],"status":"published","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)\n  Removed CAs:\n  - Global Chambersign Root\n  - EC-ACC\n  - Network Solutions Certificate Authority\n  - Staat der Nederlanden EV Root CA\n  - SwissSign Platinum CA - G2\n  Added CAs:\n  - DIGITALSIGN GLOBAL ROOT ECDSA CA\n  - DIGITALSIGN GLOBAL ROOT RSA CA\n  - Security Communication ECC RootCA1\n  - Security Communication RootCA3\n  Changed trust:\n  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)\n- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'\n  and it is not clear how many certs were issued for SSL middleware by TrustCor:\n  - TrustCor RootCert CA-1\n  - TrustCor RootCert CA-2\n  - TrustCor ECA-1","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-01-06T14:36:02Z","modified":"2023-01-06T14:36:02Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ca-certificates-mozilla","fixed_in":["2.60-150200.27.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.60-150200.27.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.60-150200.27.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230037-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206212","tags":["report"]},{"url":"https://bugzilla.suse.com/1206622","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2023:0037-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)\n  Removed CAs:\n  - Global Chambersign Root\n  - EC-ACC\n  - Network Solutions Certificate Authority\n  - Staat der Nederlanden EV Root CA\n  - SwissSign Platinum CA - G2\n  Added CAs:\n  - DIGITALSIGN GLOBAL ROOT ECDSA CA\n  - DIGITALSIGN GLOBAL ROOT RSA CA\n  - Security Communication ECC RootCA1\n  - Security Communication RootCA3\n  Changed trust:\n  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)\n- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'\n  and it is not clear how many certs were issued for SSL middleware by TrustCor:\n  - TrustCor RootCert CA-1\n  - TrustCor RootCert CA-2\n  - TrustCor ECA-1\n","status":"published","published":"2023-01-06T14:36:02Z","modified":"2023-01-06T14:36:02Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}