{"id":"SUSE-SU-2024:2869-1","aliases":[],"status":"published","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)\n  - Added: FIRMAPROFESIONAL CA ROOT-A WEB\n  - Distrust: GLOBALTRUST 2020\n\n- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)\n  Added:\n  - CommScope Public Trust ECC Root-01\n  - CommScope Public Trust ECC Root-02\n  - CommScope Public Trust RSA Root-01\n  - CommScope Public Trust RSA Root-02\n  - D-Trust SBR Root CA 1 2022\n  - D-Trust SBR Root CA 2 2022\n  - Telekom Security SMIME ECC Root 2021\n  - Telekom Security SMIME RSA Root 2023\n  - Telekom Security TLS ECC Root 2020\n  - Telekom Security TLS RSA Root 2023\n  - TrustAsia Global Root CA G3\n  - TrustAsia Global Root CA G4\n  Removed:\n  - Autoridad de Certificacion Firmaprofesional CIF A62634068\n  - Chambers of Commerce Root - 2008\n  - Global Chambersign Root - 2008\n  - Security Communication Root CA\n  - Symantec Class 1 Public Primary Certification Authority - G6\n  - Symantec Class 2 Public Primary Certification Authority - G6\n  - TrustCor ECA-1\n  - TrustCor RootCert CA-1\n  - TrustCor RootCert CA-2\n  - VeriSign Class 1 Public Primary Certification Authority - G3\n  - VeriSign Class 2 Public Primary Certification Authority - G3","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-08-09T13:59:59Z","modified":"2024-08-09T13:59:59Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.5","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ca-certificates-mozilla","fixed_in":["2.68-150200.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.68-150200.33.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68-150200.33.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242869-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220356","tags":["report"]},{"url":"https://bugzilla.suse.com/1227525","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2024:2869-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)\n  - Added: FIRMAPROFESIONAL CA ROOT-A WEB\n  - Distrust: GLOBALTRUST 2020\n\n- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)\n  Added:\n  - CommScope Public Trust ECC Root-01\n  - CommScope Public Trust ECC Root-02\n  - CommScope Public Trust RSA Root-01\n  - CommScope Public Trust RSA Root-02\n  - D-Trust SBR Root CA 1 2022\n  - D-Trust SBR Root CA 2 2022\n  - Telekom Security SMIME ECC Root 2021\n  - Telekom Security SMIME RSA Root 2023\n  - Telekom Security TLS ECC Root 2020\n  - Telekom Security TLS RSA Root 2023\n  - TrustAsia Global Root CA G3\n  - TrustAsia Global Root CA G4\n  Removed:\n  - Autoridad de Certificacion Firmaprofesional CIF A62634068\n  - Chambers of Commerce Root - 2008\n  - Global Chambersign Root - 2008\n  - Security Communication Root CA\n  - Symantec Class 1 Public Primary Certification Authority - G6\n  - Symantec Class 2 Public Primary Certification Authority - G6\n  - TrustCor ECA-1\n  - TrustCor RootCert CA-1\n  - TrustCor RootCert CA-2\n  - VeriSign Class 1 Public Primary Certification Authority - G3\n  - VeriSign Class 2 Public Primary Certification Authority - G3\n","status":"published","published":"2024-08-09T13:59:59Z","modified":"2024-08-09T13:59:59Z","updated_at":"2026-11-02T15:53:55.136363Z"}]}}