Most recent entries from all

bdu:2024-07771

BREW-azure-cli-CVE-2024-39689 — Certifi removes GLOBALTRUST root certificate

Affected: Homebrew: azure-cli

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found [here]( https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI).

certfr-2024-avi-0750 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0750

EUVD-2026-217784

fkie_cve-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

GHSA-248v-346w-9cwc — Certifi removes GLOBALTRUST root certificate

Affected: PyPI: certifi

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

msrc_CVE-2024-39689 — Certifi removes GLOBALTRUST root certificate

msrc_CVE-2024-39689

OESA-2026-2145 — ca-certificates security update

Affected: openEuler:20.03-LTS-SP4: ca-certificates, openEuler:22.03-LTS-SP4: ca-certificates, openEuler:24.03-LTS: ca-certificates, openEuler:24.03-LTS-SP1: ca-certificates, openEuler:24.03-LTS-SP3: ca-certificates

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI. Security Fix(es):

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.07.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla s trust store. `GLOBALTRUST` s root certificates are being removed pursuant to an investigation which identified long-running and unresolved compliance issues.(CVE-2024-39689)

openSUSE-SU-2024:14118-1 — python310-certifi-2024.7.4-1.1 on GA media

python310-certifi-2024.7.4-1.1 on GA media

PYSEC-2024-230

Affected: PyPI: certifi

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.07.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

Withdrawn: UBUNTU-CVE-2024-39689

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:Pro:16.04:LTS: python-certifi, Ubuntu:Pro:16.04:LTS: python-pip, Ubuntu:Pro:18.04:LTS: python-certifi, Ubuntu:Pro:18.04:LTS: python-pip, Ubuntu:Pro:20.04:LTS: python-certifi, Ubuntu:Pro:20.04:LTS: python-pip, Ubuntu:22.04:LTS: python-certifi, Ubuntu:22.04:LTS: python-pip, Ubuntu:24.04:LTS: python-certifi and 1 more

WID-SEC-W-2024-1802 — IBM Business Automation Workflow: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen oder beliebigen Code auszuführen.