ELBA-2023-5623

ELBA-2023-5623 - ca-certificates bug fix update

Type:	BUG
Severity:	NA
Release Date:	2023-10-10

Description

[2023.2.60_v7.0.306-72]
- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.

[2023.2.60_v7.0.306-71]
- Update to CKBI 2.60_v7.0.306 from NSS 3.91
- Removing:
- # Certificate 'Camerfirma Global Chambersign Root'
- # Certificate 'Staat der Nederlanden EV Root CA'
- # Certificate 'OpenTrust Root CA G1'
- # Certificate 'Swedish Government Root Authority v1'
- # Certificate 'DigiNotar Root CA G2'
- # Certificate 'Federal Common Policy CA'
- # Certificate 'TC TrustCenter Universal CA III'
- # Certificate 'CCA India 2007'
- # Certificate 'ipsCA Global CA Root'
- # Certificate 'ipsCA Main CA Root'
- # Certificate 'Macao Post eSignTrust Root Certification Authority'
- # Certificate 'InfoNotary CSP Root'
- # Certificate 'DigiNotar Root CA'
- # Certificate 'Root CA'
- # Certificate 'GPKIRootCA'
- # Certificate 'D-TRUST Qualified Root CA 1 2007:PN'
- # Certificate 'TC TrustCenter Universal CA I'
- # Certificate 'TC TrustCenter Universal CA II'
- # Certificate 'TC TrustCenter Class 2 CA II'
- # Certificate 'TC TrustCenter Class 4 CA II'
- # Certificate 'TURKTRUST Elektronik Sertifika Hizmet Saglayicisi'
- # Certificate 'CertRSA01'
- # Certificate 'KISA RootCA 3'
- # Certificate 'A-CERT ADVANCED'
- # Certificate 'A-Trust-Qual-01'
- # Certificate 'A-Trust-nQual-01'
- # Certificate 'Serasa Certificate Authority II'
- # Certificate 'TDC Internet'
- # Certificate 'America Online Root Certification Authority 2'
- # Certificate 'RSA Security Inc'
- # Certificate 'Public Notary Root'
- # Certificate 'Autoridade Certificadora Raiz Brasileira'
- # Certificate 'Post.Trust Root CA'
- # Certificate 'Entrust.net Secure Server Certification Authority'
- # Certificate 'ePKI EV SSL Certification Authority - G1'
- Adding:
- # Certificate 'DigiCert TLS ECC P384 Root G5'
- # Certificate 'DigiCert TLS RSA4096 Root G5'
- # Certificate 'DigiCert SMIME ECC P384 Root G5'
- # Certificate 'DigiCert SMIME RSA4096 Root G5'
- # Certificate 'Certainly Root R1'
- # Certificate 'Certainly Root E1'
- # Certificate 'E-Tugra Global Root CA RSA v3'
- # Certificate 'E-Tugra Global Root CA ECC v3'
- # Certificate 'DIGITALSIGN GLOBAL ROOT RSA CA'
- # Certificate 'DIGITALSIGN GLOBAL ROOT ECDSA CA'
- # Certificate 'BJCA Global Root CA1'
- # Certificate 'BJCA Global Root CA2'
- # Certificate 'Symantec Enterprise Mobile Root for Microsoft'
- # Certificate 'A-Trust-Root-05'
- # Certificate 'ADOCA02'
- # Certificate 'StartCom Certification Authority G2'
- # Certificate 'ATHEX Root CA'
- # Certificate 'EBG Elektronik Sertifika Hizmet Saglayicisi'
- # Certificate 'GeoTrust Primary Certification Authority'
- # Certificate 'thawte Primary Root CA'
- # Certificate 'VeriSign Class 3 Public Primary Certification Authority - G5'
- # Certificate 'America Online Root Certification Authority 1'
- # Certificate 'Juur-SK'
- # Certificate 'ComSign CA'
- # Certificate 'ComSign Secured CA'
- # Certificate 'ComSign Advanced Security CA'
- # Certificate 'Global Chambersign Root'
- # Certificate 'Sonera Class2 CA'
- # Certificate 'VeriSign Class 3 Public Primary Certification Authority - G3'
- # Certificate 'VeriSign, Inc.'
- # Certificate 'GTE CyberTrust Global Root'
- # Certificate 'Equifax Secure Global eBusiness CA-1'
- # Certificate 'Equifax'
- # Certificate 'Class 1 Primary CA'
- # Certificate 'Swiss Government Root CA III'
- # Certificate 'Application CA G4 Root'
- # Certificate 'SSC GDL CA Root A'
- # Certificate 'GlobalSign Code Signing Root E45'
- # Certificate 'GlobalSign Code Signing Root R45'
- # Certificate 'Entrust Code Signing Root Certification Authority - CSBR1'

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	dfb139ac0707a962f09d12c2be3ce305	-	ol7_aarch64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	dfb139ac0707a962f09d12c2be3ce305	-	ol7_aarch64_optional_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	dfb139ac0707a962f09d12c2be3ce305	-	ol7_aarch64_u9_patch
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	9a456be9201117ce6cfe07546c7a342b	-	ol7_aarch64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	9a456be9201117ce6cfe07546c7a342b	-	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	dfb139ac0707a962f09d12c2be3ce305	-	ol7_x86_64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	dfb139ac0707a962f09d12c2be3ce305	-	ol7_x86_64_optional_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.src.rpm	dfb139ac0707a962f09d12c2be3ce305	-	ol7_x86_64_u9_patch
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	9a456be9201117ce6cfe07546c7a342b	-	ol7_x86_64_latest
	ca-certificates-2023.2.60_v7.0.306-72.el7_9.noarch.rpm	9a456be9201117ce6cfe07546c7a342b	-	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team