SUSE-RU-2022:3395-1: moderate: Recommended update for ca-certificates-mozilla

sle-updates at lists.suse.com sle-updates at lists.suse.com
Mon Sep 26 19:23:40 UTC 2022


   SUSE Recommended Update: Recommended update for ca-certificates-mozilla
______________________________________________________________________________

Announcement ID:    SUSE-RU-2022:3395-1
Rating:             moderate
References:         #1181994 #1188006 #1199079 #1202868 
Affected Products:
                    SUSE Enterprise Storage 7
                    SUSE Linux Enterprise Desktop 15-SP3
                    SUSE Linux Enterprise Desktop 15-SP4
                    SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS
                    SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS
                    SUSE Linux Enterprise High Performance Computing 15-SP3
                    SUSE Linux Enterprise High Performance Computing 15-SP4
                    SUSE Linux Enterprise Micro 5.1
                    SUSE Linux Enterprise Micro 5.2
                    SUSE Linux Enterprise Module for Basesystem 15-SP3
                    SUSE Linux Enterprise Module for Basesystem 15-SP4
                    SUSE Linux Enterprise Module for Development Tools 15-SP3
                    SUSE Linux Enterprise Module for Development Tools 15-SP4
                    SUSE Linux Enterprise Server 15-SP2-BCL
                    SUSE Linux Enterprise Server 15-SP2-LTSS
                    SUSE Linux Enterprise Server 15-SP3
                    SUSE Linux Enterprise Server 15-SP4
                    SUSE Linux Enterprise Server for SAP 15-SP2
                    SUSE Linux Enterprise Server for SAP Applications 15-SP3
                    SUSE Linux Enterprise Server for SAP Applications 15-SP4
                    SUSE Linux Enterprise Storage 7.1
                    SUSE Manager Proxy 4.1
                    SUSE Manager Proxy 4.2
                    SUSE Manager Proxy 4.3
                    SUSE Manager Retail Branch Server 4.1
                    SUSE Manager Retail Branch Server 4.2
                    SUSE Manager Retail Branch Server 4.3
                    SUSE Manager Server 4.1
                    SUSE Manager Server 4.2
                    SUSE Manager Server 4.3
                    openSUSE Leap 15.3
                    openSUSE Leap 15.4
                    openSUSE Leap Micro 5.2
______________________________________________________________________________

   An update that has four recommended fixes can now be
   installed.

Description:

   This update for ca-certificates-mozilla fixes the following issues:

   Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)

   - Added:

     - Certainly Root E1
     - Certainly Root R1
     - DigiCert SMIME ECC P384 Root G5
     - DigiCert SMIME RSA4096 Root G5
     - DigiCert TLS ECC P384 Root G5
     - DigiCert TLS RSA4096 Root G5
     - E-Tugra Global Root CA ECC v3
     - E-Tugra Global Root CA RSA v3

   - Removed:

     - Hellenic Academic and Research Institutions RootCA 2011

   Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)

   - Added:

     - Autoridad de Certificacion Firmaprofesional CIF A62634068
     - D-TRUST BR Root CA 1 2020
     - D-TRUST EV Root CA 1 2020
     - GlobalSign ECC Root CA R4
     - GTS Root R1
     - GTS Root R2
     - GTS Root R3
     - GTS Root R4
     - HiPKI Root CA - G1
     - ISRG Root X2
     - Telia Root CA v2
     - vTrus ECC Root CA
     - vTrus Root CA

   - Removed:

     - Cybertrust Global Root
     - DST Root CA X3
     - DigiNotar PKIoverheid CA Organisatie - G2
     - GlobalSign ECC Root CA R4
     - GlobalSign Root CA R2
     - GTS Root R1
     - GTS Root R2
     - GTS Root R3
     - GTS Root R4


   Updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)

   - Added:

     - HARICA Client ECC Root CA 2021
     - HARICA Client RSA Root CA 2021
     - HARICA TLS ECC Root CA 2021
     - HARICA TLS RSA Root CA 2021
     - TunTrust Root CA


   Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)

   - Added new root CAs:

     - NAVER Global Root Certification Authority

   - Removed old root CAs:

     - GeoTrust Global CA
     - GeoTrust Primary Certification Authority
     - GeoTrust Primary Certification Authority - G3
     - GeoTrust Universal CA
     - GeoTrust Universal CA 2
     - thawte Primary Root CA
     - thawte Primary Root CA - G2
     - thawte Primary Root CA - G3
     - VeriSign Class 3 Public Primary Certification Authority - G4
     - VeriSign Class 3 Public Primary Certification Authority - G5


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap Micro 5.2:

      zypper in -t patch openSUSE-Leap-Micro-5.2-2022-3395=1

   - openSUSE Leap 15.4:

      zypper in -t patch openSUSE-SLE-15.4-2022-3395=1

   - openSUSE Leap 15.3:

      zypper in -t patch openSUSE-SLE-15.3-2022-3395=1

   - SUSE Manager Server 4.1:

      zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3395=1

   - SUSE Manager Retail Branch Server 4.1:

      zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3395=1

   - SUSE Manager Proxy 4.1:

      zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3395=1

   - SUSE Linux Enterprise Server for SAP 15-SP2:

      zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3395=1

   - SUSE Linux Enterprise Server 15-SP2-LTSS:

      zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3395=1

   - SUSE Linux Enterprise Server 15-SP2-BCL:

      zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3395=1

   - SUSE Linux Enterprise Module for Development Tools 15-SP4:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-3395=1

   - SUSE Linux Enterprise Module for Development Tools 15-SP3:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-3395=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP4:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-3395=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP3:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-3395=1

   - SUSE Linux Enterprise Micro 5.2:

      zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-3395=1

   - SUSE Linux Enterprise Micro 5.1:

      zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-3395=1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3395=1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3395=1

   - SUSE Enterprise Storage 7:

      zypper in -t patch SUSE-Storage-7-2022-3395=1



Package List:

   - openSUSE Leap Micro 5.2 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - openSUSE Leap 15.4 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - openSUSE Leap 15.3 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Manager Server 4.1 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Manager Retail Branch Server 4.1 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Manager Proxy 4.1 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Server 15-SP2-BCL (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch):

      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Module for Development Tools 15-SP3 (noarch):

      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1

   - SUSE Linux Enterprise Micro 5.2 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise Micro 5.1 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1

   - SUSE Enterprise Storage 7 (noarch):

      ca-certificates-mozilla-2.56-150200.24.1
      ca-certificates-mozilla-prebuilt-2.56-150200.24.1


References:

   https://bugzilla.suse.com/1181994
   https://bugzilla.suse.com/1188006
   https://bugzilla.suse.com/1199079
   https://bugzilla.suse.com/1202868



More information about the sle-updates mailing list