Mageia alert MGASA-2023-0140 (python-certifi)
| From: | Mageia Updates <buildsystem-daemon@mageia.org> | |
| To: | updates-announce@ml.mageia.org | |
| Subject: | [updates-announce] MGASA-2023-0140: Updated python-certifi packages fix security vulnerability | |
| Date: | Sat, 15 Apr 2023 21:04:56 +0200 | |
| Message-ID: | <20230415190456.3CCF09FF29@duvel.mageia.org> | |
| Archive-link: | Article |
MGASA-2023-0140 - Updated python-certifi packages fix security vulnerability Publication date: 15 Apr 2023 URL: https://advisories.mageia.org/MGASA-2023-0140.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-23491 Description: Disable bundled Trustcor root cerificate signatures generated after Wednesday November 30 00:00:00 2022. (CVE-2022-23491) References: - https://bugs.mageia.org/show_bug.cgi?id=31248 - https://ubuntu.com/security/notices/USN-5761-1 - https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStor... - https://github.com/certifi/python-certifi/security/adviso... - https://lists.suse.com/pipermail/sle-security-updates/202... - https://lists.opensuse.org/archives/list/security-announc... - https://lists.fedoraproject.org/archives/list/package-ann... - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2... SRPMS: - 8/core/python-certifi-2022.12.7-1.mga8