openSUSE-SU-2026:22207-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22207-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22207-1

Upstream

CVE-2026-113812

Related

CVE-2026-113812

Published

2026-10-29T19:17:43Z

Modified

2026-10-31T18:00:08Z

Summary

Security update for perl-Mozilla-CA

Details

This update for perl-Mozilla-CA fixes the following issues:

Changes in perl-Mozilla-CA:

updated to 20261020.0.0 (20261020)
- 20261020
  - Update from Mozilla repository to 2026-10-20
  - Denylisted certificates: CVE-2026-113812 bsc#1287179
    - emSign ECC Root CA - G3 sha256: 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b
- 20260813
  - Update from Mozilla repository to 2026-08-13
  - Added certificates:
    - OISTE Server Root ECC G1 sha256: eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49
    - OISTE Server Root RSA G1 sha256: 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6
    - SECOM TLS ECC Root CA 2024 sha256: 6ab2ab75f51cb4f4f0156203fbf6f646232f514be059f62833308b82b4d72db1
    - SECOM TLS RSA Root CA 2024 sha256: 1435f225c5d252d7a21948cc3ce62aecfa88001e3dd72d1cc3555100eb372f93
    - SwissSign RSA TLS Root CA 2022 - 1 sha256: 193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41
    - Telia EC TLS Root CA v3 sha256: 098e08a91dbbf77478b96cceb89b1413a5da37b7c862606a955deb07179f4326
    - Telia RSA TLS Root CA v3 sha256: d13db1294c45ebc6fc86c6bbf69fa29bdfe692dff7c713c243c7a956c6a2284c
    - TrustAsia TLS ECC Root CA sha256: c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711
    - TrustAsia TLS RSA Root CA sha256: 06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3
    - e-Szigno TLS Root CA 2023 sha256: b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4
  - Removed certificates:
    - AffirmTrust Commercial sha256: 0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7
    - AffirmTrust Networking sha256: 0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b
    - AffirmTrust Premium sha256: 70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a
    - AffirmTrust Premium ECC sha256: bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423
    - Atos TrustedRoot 2011 sha256: f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
    - COMODO Certification Authority sha256: 0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66
    - Certigna sha256: e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d
    - CommScope Public Trust ECC Root-01 sha256: 11437cda7bb45e41365f45b39a38986b0de00def348e0c7bb0873633800bc38b
    - CommScope Public Trust ECC Root-02 sha256: 2ffb7f813bbbb3c89ab4e8162d0f16d71509a830cc9d73c262e5140875d1ad4a
    - CommScope Public Trust RSA Root-01 sha256: 02bdf96e2a45dd9bf18fc7e1dbdf21a0379ba3c9c2610344cfd8d606fec1ed81
    - CommScope Public Trust RSA Root-02 sha256: ffe943d793424b4f7c440c1c3d648d5363f34b82dc87aa7a9f118fc5dee101f1
    - DigiCert Assured ID Root CA sha256: 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
    - DigiCert Global Root CA sha256: 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
    - DigiCert High Assurance EV Root CA sha256: 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
    - Entrust Root Certification Authority sha256: 73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c
    - Entrust Root Certification Authority - EC1 sha256: 02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5
    - Entrust Root Certification Authority - G2 sha256: 43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339
    - FIRMAPROFESIONAL CA ROOT-A WEB sha256: bef256daf26e9c69bdec1602359798f3caf71821a03e018257c53c65617f3d4a
    - GLOBALTRUST 2020 sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a
    - GTS Root R2 sha256: 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8
    - QuoVadis Root CA 2 sha256: 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
    - QuoVadis Root CA 3 sha256: 18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35
    - Secure Global CA sha256: 4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69
    - SecureSign Root CA12 sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e
    - SecureTrust CA sha256: f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
    - SwissSign Gold CA - G2 sha256: 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
    - TeliaSonera Root CA v1 sha256: dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
    - Trustwave Global Certification Authority sha256: 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8
    - Trustwave Global ECC P256 Certification Authority sha256: 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4
    - Trustwave Global ECC P384 Certification Authority sha256: 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097
    - certSIGN ROOT CA sha256: eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
    - ePKI Root Certification Authority sha256: c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5
updated to 20250602.0.0 (20250602)
- 20250602
  - Update from Mozilla repository to 2025-06-02
  - Added certificates:
    - D-TRUST BR Root CA 2 2023 sha256: 0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1
    - D-TRUST EV Root CA 2 2023 sha256: 8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce
  - Removed certificates:
    - Baltimore CyberTrust Root sha256: 16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb
    - Comodo AAA Services root sha256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
    - Entrust.net Premium 2048 Secure Server CA sha256: 6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177
    - GlobalSign Root CA sha256: ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
    - Go Daddy Class 2 CA sha256: c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4
    - Starfield Class 2 CA sha256: 1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658
    - SwissSign Silver CA - G2 sha256: be6c4da2bbb9ba59b6f3939768374246c3c005993fa98f020d1dedbed48a81d5
    - XRamp Global CA Root sha256: cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2
updated to 20250202.0.0 (20250202)
- 20250202
  - Update from Mozilla repository to 2025-02-02
  - Added certificates:
    - GLOBALTRUST 2020 sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a
  - Removed certificates:
    - Entrust Root Certification Authority - G4 sha256: db3517d1f6732a2d5ab97c533ec70779ee3270a62fb4ac4238372460e6f01e88
    - SecureSign RootCA11 sha256: bf0feefb9e3a581ad5f9e9db7589985743d261085c4d314f6f5d7259aa421612
    - Security Communication RootCA3 sha256: 24a55c2ab051442d0617766541239a4ad032d7c55175aa34ffde2fbc4f5c5294
updated to 20240924.0.0 (20240924)
- 20240924
  - Update from Mozilla repository to 2024-09-24
  - Added certificates:
    - SecureSign Root CA12 sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e
    - SecureSign Root CA14 sha256: 4b009c1034494f9ab56bba3ba1d62731fc4d20d8955adcec10a925607261e338
    - SecureSign Root CA15 sha256: e778f0f095fe843729cd1a0082179e5314a9c291442805e1fb1d8fb6b8886c3a
    - TWCA CYBER Root CA sha256: 3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558

References

Affected packages

openSUSE:Leap 16.0 / perl-Mozilla-CA

Package

Name: perl-Mozilla-CA
Purl: pkg:rpm/opensuse/perl-Mozilla-CA&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

20261020.0.0-bp160.1.1

Ecosystem specific

{
    "binaries": [
        {
            "perl-Mozilla-CA": "20261020.0.0-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22207-1.json"