{"id":"SUSE-SU-2026:20652-1","aliases":[],"status":"published","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002)\n\n  - Removed:\n    - Baltimore CyberTrust Root\n    - CommScope Public Trust ECC Root-01\n    - CommScope Public Trust ECC Root-02\n    - CommScope Public Trust RSA Root-01\n    - CommScope Public Trust RSA Root-02\n    - DigiNotar Root CA\n\n  - Added: \n    - e-Szigno TLS Root CA 2023\n    - OISTE Client Root ECC G1\n    - OISTE Client Root RSA G1\n    - OISTE Server Root ECC G1\n    - OISTE Server Root RSA G1\n    - SwissSign RSA SMIME Root CA 2022 - 1\n    - SwissSign RSA TLS Root CA 2022 - 1\n    - TrustAsia SMIME ECC Root CA\n    - TrustAsia SMIME RSA Root CA\n    - TrustAsia TLS ECC Root CA\n    - TrustAsia TLS RSA Root CA","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-03-04T09:36:46Z","modified":"2026-03-23T04:53:06Z","fixes":[{"ecosystem":"SUSE:Linux Micro 6.1","package":"ca-certificates-mozilla","fixed_in":["2.84-slfo.1.1_1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84-slfo.1.1_1.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620652-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258002","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2026:20652-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\n- Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002)\n\n  - Removed:\n    - Baltimore CyberTrust Root\n    - CommScope Public Trust ECC Root-01\n    - CommScope Public Trust ECC Root-02\n    - CommScope Public Trust RSA Root-01\n    - CommScope Public Trust RSA Root-02\n    - DigiNotar Root CA\n\n  - Added: \n    - e-Szigno TLS Root CA 2023\n    - OISTE Client Root ECC G1\n    - OISTE Client Root RSA G1\n    - OISTE Server Root ECC G1\n    - OISTE Server Root RSA G1\n    - SwissSign RSA SMIME Root CA 2022 - 1\n    - SwissSign RSA TLS Root CA 2022 - 1\n    - TrustAsia SMIME ECC Root CA\n    - TrustAsia SMIME RSA Root CA\n    - TrustAsia TLS ECC Root CA\n    - TrustAsia TLS RSA Root CA\n","status":"published","published":"2026-03-04T09:36:46Z","modified":"2026-03-23T04:53:06.350033Z","updated_at":"2026-11-02T15:54:01.953589Z"}]}}