{"id":"SUSE-SU-2026:4821-1","aliases":[],"status":"published","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\nUpdated to 2.92 state (bsc#1286261)\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n  \n\nUpdated to 2.90 state (bsc#1279961)\nRemoved:\n\n - AffirmTrust Commercial\n - AffirmTrust Networking\n - AffirmTrust Premium\n - AffirmTrust Premium ECC\n - certSIGN ROOT CA\n - Entrust Root Certification Authority\n - PKI Root Certification Authority\n - FIRMAPROFESIONAL CA ROOT-A WEB\n - GLOBALTRUST 2020\n - Secure Global CA\n - SecureSign Root CA12\n - SecureTrust CA\n - TeliaSonera Root CA v1\n - Trustwave Global Certification Authority\n - Trustwave Global ECC P256 Certification Authority\n - Trustwave Global ECC P384 Certification Authority\n - XRamp Global Certification Authority\n  \nAdded:\n \n - SECOM SMIME RSA Root CA 2024\n - SECOM TLS ECC Root CA 2024\n - SECOM TLS RSA Root CA 2024\n - SecureSign Root CA16\n - Telia EC Email Root CA v3\n - Telia EC TLS Root CA v3\n - Telia RSA Email Root CA v3\n - Telia RSA TLS Root CA v3","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-23T13:11:52Z","modified":"2026-10-23T13:11:52Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.92-12.62.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ca-certificates-mozilla","fixed_in":["2.92-12.62.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-12.62.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-12.62.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264821-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1279961","tags":["report"]},{"url":"https://bugzilla.suse.com/1286261","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2026:4821-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\nUpdated to 2.92 state (bsc#1286261)\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n  \n\nUpdated to 2.90 state (bsc#1279961)\nRemoved:\n\n - AffirmTrust Commercial\n - AffirmTrust Networking\n - AffirmTrust Premium\n - AffirmTrust Premium ECC\n - certSIGN ROOT CA\n - Entrust Root Certification Authority\n - PKI Root Certification Authority\n - FIRMAPROFESIONAL CA ROOT-A WEB\n - GLOBALTRUST 2020\n - Secure Global CA\n - SecureSign Root CA12\n - SecureTrust CA\n - TeliaSonera Root CA v1\n - Trustwave Global Certification Authority\n - Trustwave Global ECC P256 Certification Authority\n - Trustwave Global ECC P384 Certification Authority\n - XRamp Global Certification Authority\n  \nAdded:\n \n - SECOM SMIME RSA Root CA 2024\n - SECOM TLS ECC Root CA 2024\n - SECOM TLS RSA Root CA 2024\n - SecureSign Root CA16\n - Telia EC Email Root CA v3\n - Telia EC TLS Root CA v3\n - Telia RSA Email Root CA v3\n - Telia RSA TLS Root CA v3\n","status":"published","published":"2026-10-23T13:11:52Z","modified":"2026-10-23T13:11:52Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}