Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:5130-1

Опубликовано: 06 нояб. 2026
Источник: suse-cvrf

Описание

Security update for python-certifi

This update for python-certifi fixes the following issues:

  • CVE-2024-39689: remove root certificates from GLOBALTRUST from the root store (bsc#1227519).
  • Removed eMudhra Intermediates due to compromise (bsc#1286261, bsc#1287723).

Changes for python-certifi:

  • Update to 2026.10.23.

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Server 15 SP6-LTSS
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
python311-certifi-2026.10.23-150400.12.10.1

Ссылки

Описание

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues."

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-certifi-2026.10.23-150400.12.10.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-certifi-2026.10.23-150400.12.10.1
Ссылки