SUSE-RU-2016:2095-1: moderate: Recommended update for openssl-certs

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for openssl-certs
______________________________________________________________________________

Announcement ID:    SUSE-RU-2016:2095-1
Rating:             moderate
References:         #973042 
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4 LTSS
______________________________________________________________________________

   An update that has one recommended fix can now be
   installed. It includes one version update.

Description:


   The root SSL certificates were updated to version 2.7 of the upstream
   Mozilla NSS certificate store.

   Changes done:

       *

         Removed server trust from: AC Raiz Certicamara S.A., ComSign Secured
   CA, NetLock Uzleti (Class B) Tanusitvanykiado, NetLock Business (Class B)
   Root, NetLock Expressz (Class C) Tanusitvanykiado, TC TrustCenter Class 3
   CA II, TURKTRUST Certificate Services Provider Root 1, TURKTRUST
   Certificate Services Provider Root 2, Equifax Secure Global eBusiness
   CA-1, Verisign Class 4 Public Primary Certification Authority G3.

       *

         Enable server trust: Actalis Authentication Root CA.

       *

         Deleted CAs: AOL CA, A Trust nQual 03, Buypass Class 3 CA 1, CA
   Disig, Digital Signature Trust Co Global CA 1, Digital Signature Trust Co
   Global CA 3, E Guven Kok Elektronik Sertifika Hizmet Saglayicisi, NetLock
   Expressz (Class C) Tanusitvanykiado, NetLock Kozjegyzoi (Class A)
   Tanusitvanykiado, NetLock Minositett Kozjegyzoi (Class QA)
   Tanusitvanykiado, NetLock Uzleti (Class B) Tanusitvanykiado, SG TRUST
   SERVICES RACINE, Staat der Nederlanden Root CA, TC TrustCenter Class 2 CA
   II, TC TrustCenter Universal CA I, TDC Internet Root CA, UTN DATACorp SGC
   Root CA, Verisign Class 1 Public Primary Certification Authority - G2,
   Verisign Class 3 Public Primary Certification Authority, Verisign Class 3
   Public Primary Certification Authority - G2.

       *

         New CAs: CA WoSign ECC Root, Certification Authority of WoSign,
   Certification Authority of WoSign G2, Certinomis - Root CA, Certum Trusted
   Network CA 2, CFCA EV ROOT, COMODO RSA Certification Authority, DigiCert
   Assured ID Root G2, DigiCert Assured ID Root G3, DigiCert Global Root G2,
   DigiCert Global Root G3, DigiCert Trusted Root G4, Entrust Root
   Certification Authority - EC1, Entrust Root Certification Authority - G2,
   GlobalSign, IdenTrust Commercial Root CA 1, IdenTrust Public Sector Root
   CA 1, OISTE WISeKey Global Root GB CA, QuoVadis Root CA 1 G3, QuoVadis
   Root CA 2 G3, QuoVadis Root CA 3 G3, Staat der Nederlanden EV Root CA,
   Staat der Nederlanden Root CA - G3, S-TRUST Universal Root CA, SZAFIR ROOT
   CA2, TURKTRUST Elektronik Sertifika Hizmet Saglayicisi H5, TURKTRUST
   Elektronik Sertifika Hizmet Saglayicisi H6, USERTrust ECC Certification
   Authority, USERTrust RSA Certification Authority.



Package List:

   - SUSE Linux Enterprise Server 10 SP4 LTSS (noarch) [New Version: 2.7]:

      openssl-certs-2.7-0.16.1


References:

   https://bugzilla.suse.com/973042
   https://download.suse.com/patch/finder/?keywords=934eb69fe1e8d0ea564483da01a67e44