Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2014:0444-1 Critical: OpenSSL-Certificates Security Patch

suse
Calendar Grey March 25, 2014
Scroller Suse
SUSE Manager 1.7 vital patch for openssl-certs addresses significant vulnerabilities affecting system security.
An update that contains security fixes can now be installed

Summary

The openssl-certs package was updated to match the certificates contained in the Mozilla NSS 3.15.4 release. Following changes were done to the list of root CAs: * Added: ACCVRAIZ1.pem (Spain) (all trusts) * Added: SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only) * Added: TWCA_Global_Root_CA.pem (Taiwanese) (all trusts) * Removed: Wells_Fargo_Root_CA.pem. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager 1.7 for SLE 11 SP2: zypper in -t patch sleman17sp2-openssl-certs-9027 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager 1.7 for SLE 11 SP2 (noarch): openssl-certs-1.96-0.4.1

Topics%20covered

Topics Covered

security advisory important system integrity patch instructions SUSE Manager openssl-certs certificate update

References

#860581 #865080

Affected Products:

SUSE Manager 1.7 for SLE 11 SP2

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0444-1
Rating: important

Topics%20covered

Topics Covered

security advisory important system integrity patch instructions SUSE Manager openssl-certs certificate update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.