ELBA-2023-5623

ELBA-2023-5623 - ca-certificates bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-10-10

Description

[2023.2.60_v7.0.306-72]
- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.

[2023.2.60_v7.0.306-71]
- Update to CKBI 2.60_v7.0.306 from NSS 3.91
- Removing:
- # Certificate 'Camerfirma Global Chambersign Root'
- # Certificate 'Staat der Nederlanden EV Root CA'
- # Certificate 'OpenTrust Root CA G1'
- # Certificate 'Swedish Government Root Authority v1'
- # Certificate 'DigiNotar Root CA G2'
- # Certificate 'Federal Common Policy CA'
- # Certificate 'TC TrustCenter Universal CA III'
- # Certificate 'CCA India 2007'
- # Certificate 'ipsCA Global CA Root'
- # Certificate 'ipsCA Main CA Root'
- # Certificate 'Macao Post eSignTrust Root Certification Authority'
- # Certificate 'InfoNotary CSP Root'
- # Certificate 'DigiNotar Root CA'
- # Certificate 'Root CA'
- # Certificate 'GPKIRootCA'
- # Certificate 'D-TRUST Qualified Root CA 1 2007:PN'
- # Certificate 'TC TrustCenter Universal CA I'
- # Certificate 'TC TrustCenter Universal CA II'
- # Certificate 'TC TrustCenter Class 2 CA II'
- # Certificate 'TC TrustCenter Class 4 CA II'
- # Certificate 'TURKTRUST Elektronik Sertifika Hizmet Saglayicisi'
- # Certificate 'CertRSA01'
- # Certificate 'KISA RootCA 3'
- # Certificate 'A-CERT ADVANCED'
- # Certificate 'A-Trust-Qual-01'
- # Certificate 'A-Trust-nQual-01'
- # Certificate 'Serasa Certificate Authority II'
- # Certificate 'TDC Internet'
- # Certificate 'America Online Root Certification Authority 2'
- # Certificate 'RSA Security Inc'
- # Certificate 'Public Notary Root'
- # Certificate 'Autoridade Certificadora Raiz Brasileira'
- # Certificate 'Post.Trust Root CA'
- # Certificate 'Entrust.net Secure Server Certification Authority'
- # Certificate 'ePKI EV SSL Certification Authority - G1'
- Adding:
- # Certificate 'DigiCert TLS ECC P384 Root G5'
- # Certificate 'DigiCert TLS RSA4096 Root G5'
- # Certificate 'DigiCert SMIME ECC P384 Root G5'
- # Certificate 'DigiCert SMIME RSA4096 Root G5'
- # Certificate 'Certainly Root R1'
- # Certificate 'Certainly Root E1'
- # Certificate 'E-Tugra Global Root CA RSA v3'
- # Certificate 'E-Tugra Global Root CA ECC v3'
- # Certificate 'DIGITALSIGN GLOBAL ROOT RSA CA'
- # Certificate 'DIGITALSIGN GLOBAL ROOT ECDSA CA'
- # Certificate 'BJCA Global Root CA1'
- # Certificate 'BJCA Global Root CA2'
- # Certificate 'Symantec Enterprise Mobile Root for Microsoft'
- # Certificate 'A-Trust-Root-05'
- # Certificate 'ADOCA02'
- # Certificate 'StartCom Certification Authority G2'
- # Certificate 'ATHEX Root CA'
- # Certificate 'EBG Elektronik Sertifika Hizmet Saglayicisi'
- # Certificate 'GeoTrust Primary Certification Authority'
- # Certificate 'thawte Primary Root CA'
- # Certificate 'VeriSign Class 3 Public Primary Certification Authority - G5'
- # Certificate 'America Online Root Certification Authority 1'
- # Certificate 'Juur-SK'
- # Certificate 'ComSign CA'
- # Certificate 'ComSign Secured CA'
- # Certificate 'ComSign Advanced Security CA'
- # Certificate 'Global Chambersign Root'
- # Certificate 'Sonera Class2 CA'
- # Certificate 'VeriSign Class 3 Public Primary Certification Authority - G3'
- # Certificate 'VeriSign, Inc.'
- # Certificate 'GTE CyberTrust Global Root'
- # Certificate 'Equifax Secure Global eBusiness CA-1'
- # Certificate 'Equifax'
- # Certificate 'Class 1 Primary CA'
- # Certificate 'Swiss Government Root CA III'
- # Certificate 'Application CA G4 Root'
- # Certificate 'SSC GDL CA Root A'
- # Certificate 'GlobalSign Code Signing Root E45'
- # Certificate 'GlobalSign Code Signing Root R45'
- # Certificate 'Entrust Code Signing Root Certification Authority - CSBR1'

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	ce3c536dca926500364c978191b6a3377e4b2862a5cb79b8ef72c614f287f3a8	ELBA-2024-5837	ol7_aarch64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	ce3c536dca926500364c978191b6a3377e4b2862a5cb79b8ef72c614f287f3a8	ELBA-2024-5837	ol7_aarch64_optional_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	ce3c536dca926500364c978191b6a3377e4b2862a5cb79b8ef72c614f287f3a8	ELBA-2024-5837	ol7_aarch64_u9_patch
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	ol7_aarch64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	ce3c536dca926500364c978191b6a3377e4b2862a5cb79b8ef72c614f287f3a8	ELBA-2024-5837	ol7_x86_64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	ce3c536dca926500364c978191b6a3377e4b2862a5cb79b8ef72c614f287f3a8	ELBA-2024-5837	ol7_x86_64_optional_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	ce3c536dca926500364c978191b6a3377e4b2862a5cb79b8ef72c614f287f3a8	ELBA-2024-5837	ol7_x86_64_u9_patch
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.17.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.18.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.19.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.20.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.21.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.22.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.23.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.24.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.25.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.26.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.27.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	exadata_dbserver_22.1.28.0.0_x86_64_base
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	ol7_x86_64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	2a278d04587ba7d302344f6408435d487a4898758259f2652e479111e7e885de	ELBA-2024-5837	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team