PT-2023-36250 · Mozilla · Ca-Certificates-Mozilla

Publicado 2023-08-28 · Atualizado 2023-08-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ca-certificates-mozilla (affected versions not specified)

Description The issue involves an update to the 2.62 state of Mozilla SSL root CAs. This update adds several new root CAs, including Atos TrustedRoot Root CA ECC G2 2020, Atos TrustedRoot Root CA ECC TLS 2021, Atos TrustedRoot Root CA RSA G2 2020, Atos TrustedRoot Root CA RSA TLS 2021, BJCA Global Root CA1, BJCA Global Root CA2, LAWtrust Root CA2 (4096), Sectigo Public Email Protection Root E46, Sectigo Public Email Protection Root R46, Sectigo Public Server Authentication Root E46, Sectigo Public Server Authentication Root R46, SSL.com Client ECC Root CA 2022, SSL.com Client RSA Root CA 2022, SSL.com TLS ECC Root CA 2022, and SSL.com TLS RSA Root CA 2022. It also removes several CAs, including Chambers of Commerce Root, E-Tugra Certification Authority, E-Tugra Global Root CA ECC v3, E-Tugra Global Root CA RSA v3, and Hongkong Post Root CA 1.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

SUSE-SU-2023:3462-1

Produtos afetados

Ca-Certificates-Mozilla

Referências · 3

• https://bugzilla.suse.com/1214248 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2023:3462-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20233462-1 · Nota