{"id":"openSUSE-SU-2026:22207-1","summary":"Security update for perl-Mozilla-CA","details":"This update for perl-Mozilla-CA fixes the following issues:\n\nChanges in perl-Mozilla-CA:\n\n- updated to 20261020.0.0 (20261020)\n  * 20261020\n    - Update from Mozilla repository to 2026-10-20\n    - Denylisted certificates: CVE-2026-113812 bsc#1287179\n      - emSign ECC Root CA - G3\n        sha256: 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b\n\n  * 20260813\n    - Update from Mozilla repository to 2026-08-13\n    - Added certificates:\n      - OISTE Server Root ECC G1\n        sha256: eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49\n      - OISTE Server Root RSA G1\n        sha256: 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6\n      - SECOM TLS ECC Root CA 2024\n        sha256: 6ab2ab75f51cb4f4f0156203fbf6f646232f514be059f62833308b82b4d72db1\n      - SECOM TLS RSA Root CA 2024\n        sha256: 1435f225c5d252d7a21948cc3ce62aecfa88001e3dd72d1cc3555100eb372f93\n      - SwissSign RSA TLS Root CA 2022 - 1\n        sha256: 193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41\n      - Telia EC TLS Root CA v3\n        sha256: 098e08a91dbbf77478b96cceb89b1413a5da37b7c862606a955deb07179f4326\n      - Telia RSA TLS Root CA v3\n        sha256: d13db1294c45ebc6fc86c6bbf69fa29bdfe692dff7c713c243c7a956c6a2284c\n      - TrustAsia TLS ECC Root CA\n        sha256: c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711\n      - TrustAsia TLS RSA Root CA\n        sha256: 06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3\n      - e-Szigno TLS Root CA 2023\n        sha256: b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4\n    - Removed certificates:\n      - AffirmTrust Commercial\n        sha256: 0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7\n      - AffirmTrust Networking\n        sha256: 0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b\n      - AffirmTrust Premium\n        sha256: 70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a\n      - AffirmTrust Premium ECC\n        sha256: bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423\n      - Atos TrustedRoot 2011\n        sha256: f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474\n      - COMODO Certification Authority\n        sha256: 0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66\n      - Certigna\n        sha256: e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d\n      - CommScope Public Trust ECC Root-01\n        sha256: 11437cda7bb45e41365f45b39a38986b0de00def348e0c7bb0873633800bc38b\n      - CommScope Public Trust ECC Root-02\n        sha256: 2ffb7f813bbbb3c89ab4e8162d0f16d71509a830cc9d73c262e5140875d1ad4a\n      - CommScope Public Trust RSA Root-01\n        sha256: 02bdf96e2a45dd9bf18fc7e1dbdf21a0379ba3c9c2610344cfd8d606fec1ed81\n      - CommScope Public Trust RSA Root-02\n        sha256: ffe943d793424b4f7c440c1c3d648d5363f34b82dc87aa7a9f118fc5dee101f1\n      - DigiCert Assured ID Root CA\n        sha256: 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c\n      - DigiCert Global Root CA\n        sha256: 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161\n      - DigiCert High Assurance EV Root CA\n        sha256: 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf\n      - Entrust Root Certification Authority\n        sha256: 73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c\n      - Entrust Root Certification Authority - EC1\n        sha256: 02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5\n      - Entrust Root Certification Authority - G2\n        sha256: 43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339\n      - FIRMAPROFESIONAL CA ROOT-A WEB\n        sha256: bef256daf26e9c69bdec1602359798f3caf71821a03e018257c53c65617f3d4a\n      - GLOBALTRUST 2020\n        sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a\n      - GTS Root R2\n        sha256: 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8\n      - QuoVadis Root CA 2\n        sha256: 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86\n      - QuoVadis Root CA 3\n        sha256: 18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35\n      - Secure Global CA\n        sha256: 4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69\n      - SecureSign Root CA12\n        sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e\n      - SecureTrust CA\n        sha256: f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73\n      - SwissSign Gold CA - G2\n        sha256: 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95\n      - TeliaSonera Root CA v1\n        sha256: dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389\n      - Trustwave Global Certification Authority\n        sha256: 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8\n      - Trustwave Global ECC P256 Certification Authority\n        sha256: 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4\n      - Trustwave Global ECC P384 Certification Authority\n        sha256: 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097\n      - certSIGN ROOT CA\n        sha256: eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb\n      - ePKI Root Certification Authority\n        sha256: c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5\n\n- updated to 20250602.0.0 (20250602)\n  * 20250602\n    - Update from Mozilla repository to 2025-06-02\n    - Added certificates:\n      - D-TRUST BR Root CA 2 2023\n        sha256: 0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1\n      - D-TRUST EV Root CA 2 2023\n        sha256: 8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce\n    - Removed certificates:\n      - Baltimore CyberTrust Root\n        sha256: 16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb\n      - Comodo AAA Services root\n        sha256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4\n      - Entrust.net Premium 2048 Secure Server CA\n        sha256: 6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177\n      - GlobalSign Root CA\n        sha256: ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99\n      - Go Daddy Class 2 CA\n        sha256: c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4\n      - Starfield Class 2 CA\n        sha256: 1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658\n      - SwissSign Silver CA - G2\n        sha256: be6c4da2bbb9ba59b6f3939768374246c3c005993fa98f020d1dedbed48a81d5\n      - XRamp Global CA Root\n        sha256: cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2\n\n- updated to 20250202.0.0 (20250202)\n  * 20250202\n    - Update from Mozilla repository to 2025-02-02\n    - Added certificates:\n      - GLOBALTRUST 2020\n        sha256: 9a296a5182d1d451a2e37f439b74daafa267523329f90f9a0d2007c334e23c9a\n    - Removed certificates:\n      - Entrust Root Certification Authority - G4\n        sha256: db3517d1f6732a2d5ab97c533ec70779ee3270a62fb4ac4238372460e6f01e88\n      - SecureSign RootCA11\n        sha256: bf0feefb9e3a581ad5f9e9db7589985743d261085c4d314f6f5d7259aa421612\n      - Security Communication RootCA3\n        sha256: 24a55c2ab051442d0617766541239a4ad032d7c55175aa34ffde2fbc4f5c5294\n\n- updated to 20240924.0.0 (20240924)\n  * 20240924\n    - Update from Mozilla repository to 2024-09-24\n    - Added certificates:\n      - SecureSign Root CA12\n        sha256: 3f034bb5704d44b2d08545a02057de93ebf3905fce721acbc730c06ddaee904e\n      - SecureSign Root CA14\n        sha256: 4b009c1034494f9ab56bba3ba1d62731fc4d20d8955adcec10a925607261e338\n      - SecureSign Root CA15\n        sha256: e778f0f095fe843729cd1a0082179e5314a9c291442805e1fb1d8fb6b8886c3a\n      - TWCA CYBER Root CA\n        sha256: 3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558\n","modified":"2026-10-31T18:00:08.687461841Z","published":"2026-10-29T19:17:43Z","related":["CVE-2026-113812"],"upstream":["CVE-2026-113812"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1287179"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-113812"}],"affected":[{"package":{"name":"perl-Mozilla-CA","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/perl-Mozilla-CA&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20261020.0.0-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"perl-Mozilla-CA":"20261020.0.0-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22207-1.json"}}],"schema_version":"1.9.2"}