PT-2023-36104 · Mozilla · Ca-Certificates-Mozilla

Publicado 2023-01-02 · Atualizado 2023-01-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ca-certificates-mozilla (affected versions not specified)

Description The issue involves an update to the Mozilla SSL root CAs, which includes the removal and addition of certain Certificate Authorities (CAs). The removed CAs are Global Chambersign Root, EC-ACC, Network Solutions Certificate Authority, Staat der Nederlanden EV Root CA, and SwissSign Platinum CA - G2. The added CAs are DIGITALSIGN GLOBAL ROOT ECDSA CA, DIGITALSIGN GLOBAL ROOT RSA CA, Security Communication ECC RootCA1, and Security Communication RootCA3. Additionally, TrustCor certificates are only trusted up to November 30.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

SUSE-SU-2023:0003-1

Produtos afetados

Ca-Certificates-Mozilla

Referências · 4

• https://bugzilla.suse.com/1206622 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2023:0003-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1206212 · Nota
• https://suse.com/support/update/announcement/2023/suse-su-20230003-1 · Nota