Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-37920

Опубликовано: 25 июл. 2023
Источник: debian
EPSS Низкий

Описание

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
python-certififixed2023.7.22-1package

Примечания

  • https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7

  • Debian's python-certifi is patched to return the location of Debian-provided CA certificates

EPSS

Процентиль: 31%
0.00115
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 2 года назад

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.

CVSS3: 9.1
redhat
почти 2 года назад

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.

CVSS3: 7.5
nvd
почти 2 года назад

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.

CVSS3: 9.8
msrc
12 месяцев назад

Описание отсутствует

CVSS3: 7.5
github
почти 2 года назад

Removal of e-Tugra root certificate

EPSS

Процентиль: 31%
0.00115
Низкий