Security update for ca-certificates-mozilla SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:4625-1 Final 1 1 2022-12-27T08:47:55Z current 2022-12-27T08:47:55Z 2022-12-27T08:47:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ca-certificates-mozilla This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: - DIGITALSIGN GLOBAL ROOT ECDSA CA - DIGITALSIGN GLOBAL ROOT RSA CA - Security Communication ECC RootCA1 - Security Communication RootCA3 Changed trust: - TrustCor certificates only trusted up to Nov 30 (bsc#1206212) - Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor: - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/ltss/sle12.5/sles12sp5:latest-2022-4625,Container suse/sles12sp4:latest-2022-4625,Container suse/sles12sp5:latest-2022-4625,Image SLES12-SP5-Azure-BYOS-2022-4625,Image SLES12-SP5-Azure-Basic-On-Demand-2022-4625,Image SLES12-SP5-Azure-HPC-BYOS-2022-4625,Image SLES12-SP5-Azure-HPC-On-Demand-2022-4625,Image SLES12-SP5-Azure-SAP-BYOS-2022-4625,Image SLES12-SP5-Azure-SAP-On-Demand-2022-4625,Image SLES12-SP5-Azure-Standard-On-Demand-2022-4625,Image SLES12-SP5-EC2-BYOS-2022-4625,Image SLES12-SP5-EC2-ECS-On-Demand-2022-4625,Image SLES12-SP5-EC2-On-Demand-2022-4625,Image SLES12-SP5-EC2-SAP-BYOS-2022-4625,Image SLES12-SP5-EC2-SAP-On-Demand-2022-4625,Image SLES12-SP5-GCE-BYOS-2022-4625,Image SLES12-SP5-GCE-On-Demand-2022-4625,Image SLES12-SP5-GCE-SAP-BYOS-2022-4625,Image SLES12-SP5-GCE-SAP-On-Demand-2022-4625,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-4625,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-4625,SUSE-2022-4625,SUSE-OpenStack-Cloud-9-2022-4625,SUSE-OpenStack-Cloud-Crowbar-9-2022-4625,SUSE-SLE-SAP-12-SP4-2022-4625,SUSE-SLE-SERVER-12-SP2-BCL-2022-4625,SUSE-SLE-SERVER-12-SP4-LTSS-2022-4625,SUSE-SLE-SERVER-12-SP5-2022-4625 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20224625-1/ Link for SUSE-SU-2022:4625-1 https://lists.suse.com/pipermail/sle-security-updates/2022-December/013347.html E-Mail link for SUSE-SU-2022:4625-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1206212 SUSE Bug 1206212 https://bugzilla.suse.com/1206622 SUSE Bug 1206622 Container suse/ltss/sle12.5/sles12sp5:latest Container suse/sles12sp4:latest Container suse/sles12sp5:latest Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 ca-certificates-mozilla-2.60-12.40.1 ca-certificates-mozilla-2.60-12.40.1 as a component of Container suse/ltss/sle12.5/sles12sp5:latest ca-certificates-mozilla-2.60-12.40.1 as a component of Container suse/sles12sp4:latest ca-certificates-mozilla-2.60-12.40.1 as a component of Container suse/sles12sp5:latest ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-EC2-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-EC2-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-GCE-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-GCE-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production ca-certificates-mozilla-2.60-12.40.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE Linux Enterprise Server 12 SP5 ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE OpenStack Cloud 9 ca-certificates-mozilla-2.60-12.40.1 as a component of SUSE OpenStack Cloud Crowbar 9