ELBA-2024-5736

ELBA-2024-5736 - ca-certificates bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2024-08-21

Description

[2024.2.69_v8.0.303-80.0]
- Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
- Removing:
- # Certificate 'Verisign Class 1 Public Primary Certification Authority - G3'
- # Certificate 'Verisign Class 2 Public Primary Certification Authority - G3'
- # Certificate 'Security Communication Root CA'
- # Certificate 'Camerfirma Chambers of Commerce Root'
- # Certificate 'Hongkong Post Root CA 1'
- # Certificate 'Autoridad de Certificacion Firmaprofesional CIF A62634068'
- # Certificate 'Symantec Class 1 Public Primary Certification Authority - G6'
- # Certificate 'Symantec Class 2 Public Primary Certification Authority - G6'
- # Certificate 'TrustCor RootCert CA-1'
- # Certificate 'TrustCor RootCert CA-2'
- # Certificate 'TrustCor ECA-1'
- # Certificate 'FNMT-RCM'
- Adding:
- # Certificate 'LAWtrust Root CA2 (4096)'
- # Certificate 'Sectigo Public Email Protection Root E46'
- # Certificate 'Sectigo Public Email Protection Root R46'
- # Certificate 'Sectigo Public Server Authentication Root E46'
- # Certificate 'Sectigo Public Server Authentication Root R46'
- # Certificate 'SSL.com TLS RSA Root CA 2022'
- # Certificate 'SSL.com TLS ECC Root CA 2022'
- # Certificate 'SSL.com Client ECC Root CA 2022'
- # Certificate 'SSL.com Client RSA Root CA 2022'
- # Certificate 'Atos TrustedRoot Root CA ECC G2 2020'
- # Certificate 'Atos TrustedRoot Root CA RSA G2 2020'
- # Certificate 'Atos TrustedRoot Root CA ECC TLS 2021'
- # Certificate 'Atos TrustedRoot Root CA RSA TLS 2021'
- # Certificate 'TrustAsia Global Root CA G3'
- # Certificate 'TrustAsia Global Root CA G4'
- # Certificate 'CommScope Public Trust ECC Root-01'
- # Certificate 'CommScope Public Trust ECC Root-02'
- # Certificate 'CommScope Public Trust RSA Root-01'
- # Certificate 'CommScope Public Trust RSA Root-02'
- # Certificate 'D-Trust SBR Root CA 1 2022'
- # Certificate 'D-Trust SBR Root CA 2 2022'
- # Certificate 'Telekom Security SMIME ECC Root 2021'
- # Certificate 'Telekom Security TLS ECC Root 2020'
- # Certificate 'Telekom Security SMIME RSA Root 2023'
- # Certificate 'Telekom Security TLS RSA Root 2023'
- # Certificate 'FIRMAPROFESIONAL CA ROOT-A WEB'
- # Certificate 'SECOM Trust.net'
- # Certificate 'Chambers of Commerce Root'
- # Certificate 'VeriSign Class 2 Public Primary Certification Authority - G3'
- # Certificate 'SSL.com Code Signing RSA Root CA 2022'
- # Certificate 'SSL.com Code Signing ECC Root CA 2022'

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.src.rpm	3167e4e7a0415b14b19203b63f1c05d1	-	ol8_aarch64_baseos_latest
	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.src.rpm	3167e4e7a0415b14b19203b63f1c05d1	-	ol8_aarch64_u10_baseos_patch
	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.noarch.rpm	8d50fd672e9c22ab6ff0045af4868a81	-	ol8_aarch64_baseos_latest
	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.noarch.rpm	8d50fd672e9c22ab6ff0045af4868a81	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.src.rpm	3167e4e7a0415b14b19203b63f1c05d1	-	ol8_x86_64_baseos_latest
	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.src.rpm	3167e4e7a0415b14b19203b63f1c05d1	-	ol8_x86_64_u10_baseos_patch
	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.noarch.rpm	8d50fd672e9c22ab6ff0045af4868a81	-	ol8_x86_64_baseos_latest
	ca-certificates-2024.2.69_v8.0.303-80.0.el8_10.noarch.rpm	8d50fd672e9c22ab6ff0045af4868a81	-	ol8_x86_64_u10_baseos_patch