ELBA-2024-5837

ELBA-2024-5837 - ca-certificates bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2024-09-28

Description

[2024.2.69_v8.0.303-71.0.1]
- Update to CKBI 2.69_v8.0.303 from NSS 3.101.1 [Orabug: 36990889]
- Removing:
- # Certificate 'Verisign Class 1 Public Primary Certification Authority - G3'
- # Certificate 'Verisign Class 2 Public Primary Certification Authority - G3'
- # Certificate 'Security Communication Root CA'
- # Certificate 'Camerfirma Chambers of Commerce Root'
- # Certificate 'Hongkong Post Root CA 1'
- # Certificate 'Autoridad de Certificacion Firmaprofesional CIF A62634068'
- # Certificate 'Symantec Class 1 Public Primary Certification Authority - G6'
- # Certificate 'Symantec Class 2 Public Primary Certification Authority - G6'
- # Certificate 'TrustCor RootCert CA-1'
- # Certificate 'TrustCor RootCert CA-2'
- # Certificate 'TrustCor ECA-1'
- # Certificate 'FNMT-RCM'
- Adding:
- # Certificate 'LAWtrust Root CA2 (4096)'
- # Certificate 'Sectigo Public Email Protection Root E46'
- # Certificate 'Sectigo Public Email Protection Root R46'
- # Certificate 'Sectigo Public Server Authentication Root E46'
- # Certificate 'Sectigo Public Server Authentication Root R46'
- # Certificate 'SSL.com TLS RSA Root CA 2022'
- # Certificate 'SSL.com TLS ECC Root CA 2022'
- # Certificate 'SSL.com Client ECC Root CA 2022'
- # Certificate 'SSL.com Client RSA Root CA 2022'
- # Certificate 'Atos TrustedRoot Root CA ECC G2 2020'
- # Certificate 'Atos TrustedRoot Root CA RSA G2 2020'
- # Certificate 'Atos TrustedRoot Root CA ECC TLS 2021'
- # Certificate 'Atos TrustedRoot Root CA RSA TLS 2021'
- # Certificate 'TrustAsia Global Root CA G3'
- # Certificate 'TrustAsia Global Root CA G4'
- # Certificate 'CommScope Public Trust ECC Root-01'
- # Certificate 'CommScope Public Trust ECC Root-02'
- # Certificate 'CommScope Public Trust RSA Root-01'
- # Certificate 'CommScope Public Trust RSA Root-02'
- # Certificate 'D-Trust SBR Root CA 1 2022'
- # Certificate 'D-Trust SBR Root CA 2 2022'
- # Certificate 'Telekom Security SMIME ECC Root 2021'
- # Certificate 'Telekom Security TLS ECC Root 2020'
- # Certificate 'Telekom Security SMIME RSA Root 2023'
- # Certificate 'Telekom Security TLS RSA Root 2023'
- # Certificate 'FIRMAPROFESIONAL CA ROOT-A WEB'
- # Certificate 'SECOM Trust.net'
- # Certificate 'Chambers of Commerce Root'
- # Certificate 'VeriSign Class 2 Public Primary Certification Authority - G3'
- # Certificate 'SSL.com Code Signing RSA Root CA 2022'
- # Certificate 'SSL.com Code Signing ECC Root CA 2022'

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.src.rpm	1e822219edeae9df6ef4cba084c5ab25	-	ol7_aarch64_latest
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.src.rpm	1e822219edeae9df6ef4cba084c5ab25	-	ol7_aarch64_optional_latest
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.src.rpm	1e822219edeae9df6ef4cba084c5ab25	-	ol7_aarch64_u9_patch
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.noarch.rpm	56a50345c8fc0aaa523452845ed9cb79	-	ol7_aarch64_latest
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.noarch.rpm	56a50345c8fc0aaa523452845ed9cb79	-	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.src.rpm	1e822219edeae9df6ef4cba084c5ab25	-	ol7_x86_64_latest
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.src.rpm	1e822219edeae9df6ef4cba084c5ab25	-	ol7_x86_64_optional_latest
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.src.rpm	1e822219edeae9df6ef4cba084c5ab25	-	ol7_x86_64_u9_patch
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.noarch.rpm	56a50345c8fc0aaa523452845ed9cb79	-	ol7_x86_64_latest
	ca-certificates-2024.2.69_v8.0.303-71.0.1.el7_9.noarch.rpm	56a50345c8fc0aaa523452845ed9cb79	-	ol7_x86_64_u9_patch