Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

openSUSE: 2013:1891-1 Important: Manage CA Certificates

opensuse
Calendar Grey December 16, 2013
Dist Opensuse Esm H88
Key news for openSUSE users: ca-certificates-mozilla takes charge of certificate management and handles security improvements efficiently.
An update that contains security fixes can now be installed

Description

The Mozilla CA certificates package was updated to match

the current Mozilla revision 1.95 of certdata.txt.

It blacklists some misused certificate authorities, adds

some new and adjusts some others.

On openSUSE 13.1 a problem with names was also fixed.

* distrust: AC DG Tresor SSL (bnc#854367)

* new:

CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt

server auth, code signing, email signing

* new:

CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt

server auth, code signing, email signing

* new:

China_Internet_Network_Information_Center_EV_Certificates_Ro

ot:2.4.72.159.0.1.crt server auth

* changed:

Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.cr

t removed code signing and server auth abilities

* changed:

Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.c

rt removed code signing and server auth abilities

* new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt

server auth

*...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.1:

zypper in -t patch openSUSE-2013-983

- openSUSE 12.3:

zypper in -t patch openSUSE-2013-983

- openSUSE 12.2:

zypper in -t patch openSUSE-2013-983

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.1 (noarch):

ca-certificates-mozilla-1.95-3.4.1

- openSUSE 12.3 (noarch):

ca-certificates-mozilla-1.95-3.4.1

- openSUSE 12.2 (noarch):

ca-certificates-mozilla-1.95-8.12.1

References

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2013:1891-1
Rating: important
Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here