Bug 31232

Summary: rootcerts 20221130 update
Product: Mageia Reporter: David Walser <luigiwalser>
Component: SecurityAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact: Sec team <security>
Severity: normal    
Priority: Normal CC: andrewsfarm, davidwhodgins, herman.viaene, sysadmin-bugs
Version: 8Keywords: advisory, validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA8-64-OK
Source RPM: rootcerts-20220907.00-1.mga8.src.rpm CVE:
Status comment:
Bug Depends on:    
Bug Blocks: 31248, 31272    

Description David Walser 2022-12-06 18:07:23 CET 
Ubuntu has issued an advisory on December 5:
https://ubuntu.com/security/notices/USN-5761-1

The upstream change is this:
https://github.com/nss-dev/nss/commit/79ef8de788dfc8952d34155d3694ad1e159fcb3f

which Ubuntu deemed insufficient, and they completely removed the TrustCor CA cert(s) from their package, which I have not done.  A more detailed explanation of this issue is here:
https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem

For now I've just followed suit with Mozilla's upstream change.

rootcerts-20221130.00-1.mga8
rootcerts-java-20221130.00-1.mga8

from rootcerts-20221130.00-1.mga8.src.rpm
David Walser 2022-12-08 15:47:23 CET

Blocks: (none) => 31248

Comment 1 Herman Viaene 2022-12-09 14:53:32 CET 
MMGA8-64 MATE on Acer Aspire 5253
No installation issues.
Consulted several previous updates, run video from https-site, install some doc-packages , all works OK.

Whiteboard: (none) => MGA8-64-OK
CC: (none) => herman.viaene

Comment 2 Thomas Andrews 2022-12-10 14:15:59 CET 
Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

Dave Hodgins 2022-12-13 02:42:47 CET

CC: (none) => davidwhodgins
Keywords: (none) => advisory

David Walser 2022-12-13 16:09:16 CET

Blocks: (none) => 31272

Comment 3 Mageia Robot 2022-12-13 23:11:04 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0462.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED