Bug 31232 - rootcerts 20221130 update
Summary: rootcerts 20221130 update
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA8-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks: 31248 31272
  Show dependency tree / graph
 
Reported: 2022-12-06 18:07 CET by David Walser
Modified: 2022-12-13 23:11 CET (History)
4 users (show)

See Also:
Source RPM: rootcerts-20220907.00-1.mga8.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2022-12-06 18:07:23 CET 
Ubuntu has issued an advisory on December 5:
https://ubuntu.com/security/notices/USN-5761-1

The upstream change is this:
https://github.com/nss-dev/nss/commit/79ef8de788dfc8952d34155d3694ad1e159fcb3f

which Ubuntu deemed insufficient, and they completely removed the TrustCor CA cert(s) from their package, which I have not done.  A more detailed explanation of this issue is here:
https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem

For now I've just followed suit with Mozilla's upstream change.

rootcerts-20221130.00-1.mga8
rootcerts-java-20221130.00-1.mga8

from rootcerts-20221130.00-1.mga8.src.rpm
David Walser 2022-12-08 15:47:23 CET

Blocks: (none) => 31248

Comment 1 Herman Viaene 2022-12-09 14:53:32 CET 
MMGA8-64 MATE on Acer Aspire 5253
No installation issues.
Consulted several previous updates, run video from https-site, install some doc-packages , all works OK.

Whiteboard: (none) => MGA8-64-OK
CC: (none) => herman.viaene

Comment 2 Thomas Andrews 2022-12-10 14:15:59 CET 
Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

Dave Hodgins 2022-12-13 02:42:47 CET

CC: (none) => davidwhodgins
Keywords: (none) => advisory

David Walser 2022-12-13 16:09:16 CET

Blocks: (none) => 31272

Comment 3 Mageia Robot 2022-12-13 23:11:04 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2022-0462.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.