VulnerabilityPublished 22 Oct 2026Updated 10 Nov 2026

SUSE · Security update for ca-certificates-mozilla

Affects SUSESource GCVE Database

Severity

Medium

Rated by Threat Radar

Data as of 10 Nov 2026, 20:07 UTC

What to do

AI-suggested

Apply the update to ca-certificates-mozilla that updates the certificate store to version 2.92, which removes the specified root certificates. This update is the official fix provided by the vendor.

Description

This security update for ca-certificates-mozilla addresses the removal of certain root certificates, specifically emSign ECC Root CA - C3, emSign ECC Root CA - G3, and emSign Root CA - C1, by updating to the 2.92 state. This update is intended to maintain the integrity and trustworthiness of the certificate authority store.

Impact

By removing these root certificates, the update prevents the system from trusting certificates issued by these authorities, which could mitigate risks related to compromised or untrusted certificate authorities. This helps maintain secure TLS communications and prevents potential man-in-the-middle attacks that could exploit these roots.

Summary

The update for ca-certificates-mozilla removes three root certificates: emSign ECC Root CA - C3, emSign ECC Root CA - G3, and emSign Root CA - C1, aligning the certificate store with the 2.92 state as referenced by bsc#1286261. This action mitigates potential risks associated with these root certificates, which may have been deprecated or distrusted. No further technical details or CVSS scoring are provided.

References

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 10 Nov 2026, 20:07 UTC

Technical details

References

Community reviews

Related threats