Update to 2022.12.7, fixes CVE-2022-23491.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-ed525aa807 2023-03-30 01:18:52.401278 --------------------------------------------------------------------------------Name : mingw-python-certifi Product : Fedora 37 Version : 2022.12.7 Release : 1.fc37 URL : https://certifi.io/ Summary : MinGW Windows Python certifi library Description : MinGW Windows Python certifi. --------------------------------------------------------------------------------Update Information: Update to 2022.12.7, fixes CVE-2022-23491. --------------------------------------------------------------------------------ChangeLog: * Tue Mar 21 2023 Sandro Mani - 2022.12.7-1 - Update to 2022.12.7 --------------------------------------------------------------------------------References: [ 1 ] Bug #2180096 - CVE-2022-23491 mingw-python-certifi: python-certifi: untrusted root certificates [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2180096 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-ed525aa807' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Important: seamonkey security update. Date: Thu, 8 Sep 2011 09:57:46 -0500 Reply-To: "Tyler L. Parsons" Sender: Security Errata for Scientific Linux From: "Tyler L. Parsons" Subject: Security ERRATA Important: seamonkey on SL4.x i386/x86_64 Comments: To: "
Important: nss security update. Date: Fri, 29 Apr 2011 14:27:29 -0500 Reply-To: "Tyler L. Parsons" Sender: Security Errata for Scientific Linux From: "Tyler L. Parsons" Subject: Security ERRATA Important: nss security update on SL4.x, SL5.x, SL6.x i386/x86_64 In-Reply-To: MIME-Version: 1.0 Synopsis: Important: nss security update Issue date: 2011-04-28 CVE Names: Network Security Services (NSS) is a set of libraries designed to support the development of security-enabled client and server applications. This erratum blacklists a small number of HTTPS certificates by adding them, flagged as untrusted, to the NSS Builtin Object Token (the libnssckbi.so library) certificate store. (BZ#689430) Note: This fix only applies to applications using the NSS Builtin Object Token. It does not blacklist the certificates for applications that use the NSS library, but do not use the NSS Builtin Object Token (such as curl). All NSS users should upgrade to these updated packages, which correct this issue. After installing the update, applications using NSS must be restarted for the changes to take effect. SL 4.x i386: nss-3.12.8-3.el4.i386.rpm nss-devel-3.12.8-3.el4.i386.rpm nss-tools-3.12.8-3.el4.i386.rpm x86_64: nss-3.12.8-3.el4.i386.rpm nss-3.12.8-3.el4.x86_64.rpm nss-devel-3.12.8-3.el4.x86_64.rpm nss-tools-3.12.8-3.el4.x86_64.rpm SL 5.x i386: nss-3.12.8-4.el5_6.i386.rpm nss-devel-3.12.8-4.el5_6.i386.rpm nss-pkcs11-devel-3.12.8-4.el5_6.i386.rpm nss-tools-3.12.8-4.el5_6.i386.rpm x86_64: nss-3.12.8-4.el5_6.i386.rpm nss-3.12.8-4.el5_6.x86_64.rpm nss-devel-3.12.8-4.el5_6.i386.rpm nss-devel-3.12.8-4.el5_6.x86_64.rpm nss-pkcs11-devel-3.12.8-4.el5_6.i386.rpm nss-pkcs11-devel-3.12.8-4.el5_6.x86_64.rpm nss-tools-3.12.8-4.el5_6.x86_64.rpm SL 6.x i386: nss-3.12.8-3.el6_0.0.sl6.i686.rpm nss-devel-3.12.8-3.el6_0.0.sl6.i686.rpm nss-pkcs11-devel-3.12.8-3.el6_0.0.sl6.i686.rpm nss-sysinit-3.12.8-3.el6_0.0.sl6.i686.rpm nss-tools-3.12.8-3.el6_0.0.sl6.i686.rpm x86_64: nss-3.12.8-3.el6_0.0.sl6.i686.rpm nss-3.12.8-3.el6_0.0.sl6.x86_64.rpm nss-devel-3.12.8-3.el6_0.0.sl6.i686.rpm nss-devel-3.12.8-3.el6_0.0.sl6.x86_64.rpm nss-pkcs11-devel-3.12.8-3.el6_0.0.sl6.i686.rpm nss-pkcs11-devel-3.12.8-3.el6_0.0.sl6.x86_64.rpm nss-sysinit-3.12.8-3.el6_0.0.sl6.x86_64.rpm nss-tools-3.12.8-3.el6_0.0.sl6.x86_64.rpm - Scientific Linux Development Team . The recent NSS patch for Scientific Linux tackles issues with faulty certificates, recommending that all SL4, SL5, and SL6 users proceed with an upgrade.. NSS Update, Scientific Linux Security, Critical Security Patch, Untrusted Certificates. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.