ELBA-2022-6572

ELBA-2022-6572 - ca-certificates bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2022-09-20

Description

[2022.2.54-74]
- Update to CKBI 2.54 from NSS 3.79
- Removing:
- # Certificate 'TrustCor ECA-1'
- # Certificate 'TrustCor RootCert CA-2'
- # Certificate 'TrustCor RootCert CA-1'
- # Certificate 'Network Solutions Certificate Authority'
- # Certificate 'COMODO Certification Authority'
- # Certificate 'Autoridad de Certificacion Raiz del Estado Venezolano'
- # Certificate 'Microsec e-Szigno Root CA 2009'
- # Certificate 'TWCA Root Certification Authority'
- # Certificate 'Izenpe.com'
- # Certificate 'state-institutions'
- # Certificate 'GlobalSign'
- # Certificate 'Common Policy'
- # Certificate 'A-Trust-nQual-03'
- # Certificate 'A-Trust-Qual-02'
- # Certificate 'Autoridad de Certificacion Firmaprofesional CIF A62634068'
- # Certificate 'Government Root Certification Authority'
- # Certificate 'AC Raiz Certicamara S.A.'

[2022.2.54-73]
- Update to CKBI 2.54 from NSS 3.79

[2022.2.54-72]
- Update to CKBI 2.54 from NSS 3.79
- Adding:
- # Certificate 'CAEDICOM Root'
- # Certificate 'I.CA Root CA/RSA'
- # Certificate 'MULTICERT Root Certification Authority 01'
- # Certificate 'Certification Authority of WoSign G2'
- # Certificate 'CA WoSign ECC Root'
- # Certificate 'CCA India 2015 SPL'
- # Certificate 'Swedish Government Root Authority v3'
- # Certificate 'Swedish Government Root Authority v2'
- # Certificate 'Tunisian Root Certificate Authority - TunRootCA2'
- # Certificate 'OpenTrust Root CA G1'
- # Certificate 'OpenTrust Root CA G2'
- # Certificate 'OpenTrust Root CA G3'
- # Certificate 'Certplus Root CA G1'
- # Certificate 'Certplus Root CA G2'
- # Certificate 'Government Root Certification Authority'
- # Certificate 'A-Trust-Qual-02'
- # Certificate 'Thailand National Root Certification Authority - G1'
- # Certificate 'TrustCor ECA-1'
- # Certificate 'TrustCor RootCert CA-2'
- # Certificate 'TrustCor RootCert CA-1'
- # Certificate 'Certification Authority of WoSign'
- # Certificate 'CA
- # Certificate 'SSC GDL CA Root B'
- # Certificate 'SAPO Class 2 Root CA'
- # Certificate 'SAPO Class 3 Root CA'
- # Certificate 'SAPO Class 4 Root CA'
- # Certificate 'CA Disig Root R1'
- # Certificate 'Autoridad Certificadora Raiz Nacional de Uruguay'
- # Certificate 'ApplicationCA2 Root'
- # Certificate 'GlobalSign'
- # Certificate 'Symantec Class 3 Public Primary Certification Authority - G6'
- # Certificate 'Symantec Class 3 Public Primary Certification Authority - G4'
- # Certificate 'Halcom Root CA'
- # Certificate 'Swisscom Root EV CA 2'
- # Certificate 'CFCA GT CA'
- # Certificate 'Digidentity L3 Root CA - G2'
- # Certificate 'SITHS Root CA v1'
- # Certificate 'Macao Post eSignTrust Root Certification Authority (G02)'
- # Certificate 'Autoridade Certificadora Raiz Brasileira v2'
- # Certificate 'Swisscom Root CA 2'
- # Certificate 'IGC/A AC racine Etat francais'
- # Certificate 'PersonalID Trustworthy RootCA 2011'
- # Certificate 'Swedish Government Root Authority v1'
- # Certificate 'Swiss Government Root CA II'
- # Certificate 'Swiss Government Root CA I'
- # Certificate 'Network Solutions Certificate Authority'
- # Certificate 'COMODO Certification Authority'
- # Certificate 'LuxTrust Global Root'
- # Certificate 'AC1 RAIZ MTIN'
- # Certificate 'Microsoft Root Certificate Authority 2011'
- # Certificate 'CCA India 2011'
- # Certificate 'ANCERT Certificados Notariales V2'
- # Certificate 'ANCERT Certificados CGN V2'
- # Certificate 'EE Certification Centre Root CA'
- # Certificate 'DigiNotar Root CA G2'
- # Certificate 'Federal Common Policy CA'
- # Certificate 'Autoridad de Certificacion Raiz del Estado Venezolano'
- # Certificate 'Autoridad de Certificacion Raiz del Estado Venezolano'
- # Certificate 'China Internet Network Information Center EV Certificates Root'
- # Certificate 'Verizon Global Root CA'
- # Certificate 'SwissSign Silver Root CA - G3'
- # Certificate 'SwissSign Platinum Root CA - G3'
- # Certificate 'SwissSign Gold Root CA - G3'
- # Certificate 'Microsec e-Szigno Root CA 2009'
- # Certificate 'SITHS CA v3'
- # Certificate 'Certinomis - Autorite Racine'
- # Certificate 'ANF Server CA'
- # Certificate 'Thawte Premium Server CA'
- # Certificate 'Thawte Server CA'
- # Certificate 'TC TrustCenter Universal CA III'
- # Certificate 'KEYNECTIS ROOT CA'
- # Certificate 'I.CA - Standard Certification Authority, 09/2009'
- # Certificate 'I.CA - Qualified Certification Authority, 09/2009'
- # Certificate 'VI Registru Centras RCSC (RootCA)'
- # Certificate 'CCA India 2007'
- # Certificate 'Autoridade Certificadora Raiz Brasileira v1'
- # Certificate 'ipsCA Global CA Root'
- # Certificate 'ipsCA Main CA Root'
- # Certificate 'Actalis Authentication CA G1'
- # Certificate 'A-Trust-Qual-03'
- # Certificate 'AddTrust External CA Root'
- # Certificate 'ECRaizEstado'
- # Certificate 'Configuration'
- # Certificate 'FNMT-RCM'
- # Certificate 'StartCom Certification Authority'
- # Certificate 'TWCA Root Certification Authority'
- # Certificate 'VeriSign Class 3 Public Primary Certification Authority - G4'
- # Certificate 'thawte Primary Root CA - G2'
- # Certificate 'GeoTrust Primary Certification Authority - G2'
- # Certificate 'VeriSign Universal Root Certification Authority'
- # Certificate 'thawte Primary Root CA - G3'
- # Certificate 'GeoTrust Primary Certification Authority - G3'
- # Certificate 'E-ME SSI (RCA)'
- # Certificate 'ACEDICOM Root'
- # Certificate 'Autoridad Certificadora Raiz de la Secretaria de Economia'
- # Certificate 'Correo Uruguayo - Root CA'
- # Certificate 'CNNIC ROOT'
- # Certificate 'Common Policy'
- # Certificate 'Macao Post eSignTrust Root Certification Authority'
- # Certificate 'Staat der Nederlanden Root CA - G2'
- # Certificate 'NetLock Platina (Class Platinum) Fotanusitvany'
- # Certificate 'AC Ralz Certicamara S.A.'
- # Certificate 'Cisco Root CA 2048'
- # Certificate 'CA Disig'
- # Certificate 'InfoNotary CSP Root'
- # Certificate 'UCA Global Root'
- # Certificate 'UCA Root'
- # Certificate 'DigiNotar Root CA'
- # Certificate 'Starfield Services Root Certificate Authority'
- # Certificate 'I.CA - Qualified root certificate'
- # Certificate 'I.CA - Standard root certificate'
- # Certificate 'e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi'
- # Certificate 'Japanese Government'
- # Certificate 'AdminCA-CD-T01'
- # Certificate 'Admin-Root-CA'
- # Certificate 'Izenpe.com'
- # Certificate 'TOBiTAK UEKAE Kok Sertifika Hizmet Saylayicisi - Surum 3'
- # Certificate 'Halcom CA FO'
- # Certificate 'Halcom CA PO 2'
- # Certificate 'Root CA'
- # Certificate 'GPKIRootCA'
- # Certificate 'ACNLB'
- # Certificate 'state-institutions'
- # Certificate 'state-institutions'
- # Certificate 'SECOM Trust Systems CO.,LTD.'
- # Certificate 'D-TRUST Qualified Root CA 1 2007:PN'
- # Certificate 'D-TRUST Root Class 2 CA 2007'
- # Certificate 'D-TRUST Root Class 3 CA 2007'
- # Certificate 'SSC Root CA A'
- # Certificate 'SSC Root CA B'
- # Certificate 'SSC Root CA C'
- # Certificate 'Autoridad de Certificacion de la Abogacia'
- # Certificate 'Root CA Generalitat Valenciana'
- # Certificate 'VAS Latvijas Pasts SSI(RCA)'
- # Certificate 'ANCERT Certificados CGN'
- # Certificate 'ANCERT Certificados Notariales'
- # Certificate 'ANCERT Corporaciones de Derecho Publico'
- # Certificate 'GLOBALTRUST'
- # Certificate 'Certipost E-Trust TOP Root CA'
- # Certificate 'Certipost E-Trust Primary Qualified CA'
- # Certificate 'Certipost E-Trust Primary Normalised CA'
- # Certificate 'Cybertrust Global Root'
- # Certificate 'GlobalSign'
- # Certificate 'IGC/A'
- # Certificate 'S-TRUST Authentication and Encryption Root CA 2005:PN'
- # Certificate 'TC TrustCenter Universal CA I'
- # Certificate 'TC TrustCenter Universal CA II'
- # Certificate 'TC TrustCenter Class 2 CA II'
- # Certificate 'TC TrustCenter Class 4 CA II'
- # Certificate 'Swisscom Root CA 1'
- # Certificate 'Microsec e-Szigno Root CA'
- # Certificate 'LGPKI'
- # Certificate 'AC RAIZ DNIE'
- # Certificate 'Common Policy'
- # Certificate 'TORKTRUST Elektronik Sertifika Hizmet Saglayicisi'
- # Certificate 'A-Trust-nQual-03'
- # Certificate 'A-Trust-nQual-03'
- # Certificate 'CertRSA01'
- # Certificate 'KISA RootCA 1'
- # Certificate 'KISA RootCA 3'
- # Certificate 'NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado'
- # Certificate 'A-CERT ADVANCED'
- # Certificate 'A-Trust-Qual-01'
- # Certificate 'A-Trust-nQual-01'
- # Certificate 'A-Trust-Qual-02'
- # Certificate 'Staat der Nederlanden Root CA'
- # Certificate 'Serasa Certificate Authority II'
- # Certificate 'TDC Internet'
- # Certificate 'America Online Root Certification Authority 2'
- # Certificate 'Autoridad de Certificacion Firmaprofesional CIF A62634068'
- # Certificate 'Government Root Certification Authority'
- # Certificate 'RSA Security Inc'
- # Certificate 'Public Notary Root'
- # Certificate 'GeoTrust Global CA'
- # Certificate 'GeoTrust Global CA 2'
- # Certificate 'GeoTrust Universal CA'
- # Certificate 'GeoTrust Universal CA 2'
- # Certificate 'QuoVadis Root Certification Authority'
- # Certificate 'Autoridade Certificadora Raiz Brasileira'
- # Certificate 'Post.Trust Root CA'
- # Certificate 'Microsoft Root Authority'
- # Certificate 'Microsoft Root Certificate Authority'
- # Certificate 'Microsoft Root Certificate Authority 2010'
- # Certificate 'Entrust.net Secure Server Certification Authority'
- # Certificate 'UTN-USERFirst-Object'
- # Certificate 'BYTE Root Certification Authority 001'
- # Certificate 'CISRCA1'
- # Certificate 'ePKI Root Certification Authority - G2'
- # Certificate 'ePKI EV SSL Certification Authority - G1'
- # Certificate 'AC Raiz Certicamara S.A.'
- # Certificate 'SSL.com EV Root Certification Authority RSA'
- # Certificate 'LuxTrust Global Root 2'
- # Certificate 'ACA ROOT'
- # Certificate 'Security Communication ECC RootCA1'
- # Certificate 'Security Communication RootCA3'
- # Certificate 'CHAMBERS OF COMMERCE ROOT - 2016'
- # Certificate 'Network Solutions RSA Certificate Authority'
- # Certificate 'Network Solutions ECC Certificate Authority'
- # Certificate 'Australian Defence Public Root CA'
- # Certificate 'SI-TRUST Root'
- # Certificate 'Halcom Root Certificate Authority'
- # Certificate 'Application CA G3 Root'
- # Certificate 'GLOBALTRUST 2015'
- # Certificate 'Microsoft ECC Product Root Certificate Authority 2018'
- # Certificate 'emSign Root CA - G2'
- # Certificate 'emSign Root CA - C2'
- # Certificate 'Microsoft ECC TS Root Certificate Authority 2018'
- # Certificate 'DigiCert CS ECC P384 Root G5'
- # Certificate 'DigiCert CS RSA4096 Root G5'
- # Certificate 'DigiCert RSA4096 Root G5'
- # Certificate 'DigiCert ECC P384 Root G5'
- # Certificate 'HARICA Code Signing RSA Root CA 2021'
- # Certificate 'HARICA Code Signing ECC Root CA 2021'
- # Certificate 'Microsoft Identity Verification Root Certificate Authority 2020'

[2022.2.54-71]
- Update to CKBI 2.54 from NSS 3.79
- Removing:
- # Certificate 'GlobalSign Root CA - R2'
- # Certificate 'Cybertrust Global Root'
- # Certificate 'Explicitly Distrusted DigiNotar PKIoverheid G2'
- Adding:
- # Certificate 'TunTrust Root CA'
- # Certificate 'HARICA TLS RSA Root CA 2021'
- # Certificate 'HARICA TLS ECC Root CA 2021'
- # Certificate 'HARICA Client RSA Root CA 2021'
- # Certificate 'HARICA Client ECC Root CA 2021'
- # Certificate 'Autoridad de Certificacion Firmaprofesional CIF A62634068'
- # Certificate 'vTrus ECC Root CA'
- # Certificate 'vTrus Root CA'
- # Certificate 'ISRG Root X2'
- # Certificate 'HiPKI Root CA - G1'
- # Certificate 'Telia Root CA v2'
- # Certificate 'D-TRUST BR Root CA 1 2020'
- # Certificate 'D-TRUST EV Root CA 1 2020'

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	ca-certificates-2022.2.54-74.el7_9.src.rpm	37b405be158c09488b7b7bd4ba062b82	-
	ca-certificates-2022.2.54-74.el7_9.noarch.rpm	11bd0eb7b755ee59d3548dcb42ce8e8d	-
Oracle Linux 7 (x86_64)	ca-certificates-2022.2.54-74.el7_9.src.rpm	37b405be158c09488b7b7bd4ba062b82	-
	ca-certificates-2022.2.54-74.el7_9.noarch.rpm	11bd0eb7b755ee59d3548dcb42ce8e8d	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team