Most recent entries from all

BREW-azure-cli-CVE-2022-23491 — Certifi removing TrustCor root certificate

Affected: Homebrew: azure-cli

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store.

TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found [here](https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ).

certfr-2023-avi-0086 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2023-avi-0086

EUVD-2026-233357

fkie_cve-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.

GHSA-43fp-rhv2-5gv8 — Certifi removing TrustCor root certificate

Affected: PyPI: certifi

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store.

gsd-2022-23491

OESA-2023-1457 — python-certifi security update

Affected: openEuler:20.03-LTS-SP1: python-certifi, openEuler:20.03-LTS-SP3: python-certifi, openEuler:22.03-LTS: python-certifi, openEuler:22.03-LTS-SP1: python-certifi, openEuler:22.03-LTS-SP2: python-certifi

Certifi provides Mozilla carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. It has been extracted from the Requests project Security Fix(es): Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware. Conclusions of Mozilla's investigation can be found in the linked google group discussion.(CVE-2022-23491) Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.(CVE-2023-37920)

openSUSE-SU-2024:13237-1 — python310-certifi-2023.7.22-2.1 on GA media

python310-certifi-2023.7.22-2.1 on GA media

PYSEC-2022-42986

Affected: PyPI: certifi

RHBA-2023:0589 — Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.3 Product Release Update

python-certifi: untrusted root certificates

SUSE-SU-2023:0118-1 — Security update for mozilla-nss

Security update for mozilla-nss

UBUNTU-CVE-2022-23491

Affected: Ubuntu:Pro:14.04:LTS: ca-certificates, Ubuntu:Pro:16.04:LTS: ca-certificates, Ubuntu:18.04:LTS: ca-certificates, Ubuntu:20.04:LTS: ca-certificates, Ubuntu:22.04:LTS: ca-certificates

WID-SEC-W-2023-0255 — IBM Spectrum Protect: Mehrere Schwachstellen

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und einen Denial of Service zu verursachen.