OESA-2026-2145

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2145
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-2145.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-2145
Upstream
Published
2026-05-03T09:56:02Z
Modified
2026-05-03T10:17:22.626734Z
Summary
ca-certificates security update
Details

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI.

Security Fix(es):

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from GLOBALTRUST. Certifi 2024.07.04 removes root certificates from GLOBALTRUST from the root store. These are in the process of being removed from Mozilla s trust store. GLOBALTRUST s root certificates are being removed pursuant to an investigation which identified long-running and unresolved compliance issues.(CVE-2024-39689)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
ca-certificates

Package

Name
ca-certificates
Purl
pkg:rpm/openEuler/ca-certificates&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2023.2.60-5.oe2003sp4

Ecosystem specific 

{
    "src": [
        "ca-certificates-2023.2.60-5.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "ca-certificates-2023.2.60-5.oe2003sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2145.json"
openEuler:22.03-LTS-SP4
ca-certificates

Package

Name
ca-certificates
Purl
pkg:rpm/openEuler/ca-certificates&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2023.2.60-6.oe2203sp4

Ecosystem specific 

{
    "src": [
        "ca-certificates-2023.2.60-6.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "ca-certificates-2023.2.60-6.oe2203sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2145.json"
openEuler:24.03-LTS
ca-certificates

Package

Name
ca-certificates
Purl
pkg:rpm/openEuler/ca-certificates&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2023.2.64-5.oe2403sp3

Ecosystem specific 

{
    "src": [
        "ca-certificates-2023.2.64-5.oe2403.src.rpm",
        "ca-certificates-2023.2.64-5.oe2403sp1.src.rpm",
        "ca-certificates-2023.2.64-5.oe2403sp3.src.rpm"
    ],
    "noarch": [
        "ca-certificates-2023.2.64-5.oe2403.noarch.rpm",
        "ca-certificates-2023.2.64-5.oe2403sp1.noarch.rpm",
        "ca-certificates-2023.2.64-5.oe2403sp3.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2145.json"
openEuler:24.03-LTS-SP1
ca-certificates

Package

Name
ca-certificates
Purl
pkg:rpm/openEuler/ca-certificates&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2023.2.64-5.oe2403sp1

Ecosystem specific 

{
    "src": [
        "ca-certificates-2023.2.64-5.oe2403sp1.src.rpm"
    ],
    "noarch": [
        "ca-certificates-2023.2.64-5.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2145.json"
openEuler:24.03-LTS-SP3
ca-certificates

Package

Name
ca-certificates
Purl
pkg:rpm/openEuler/ca-certificates&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2023.2.64-5.oe2403sp3

Ecosystem specific 

{
    "src": [
        "ca-certificates-2023.2.64-5.oe2403sp3.src.rpm"
    ],
    "noarch": [
        "ca-certificates-2023.2.64-5.oe2403sp3.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2145.json"