Hi,
I wanted to clear up some confusion that caused me some panic.
In this bug Stephan Verbücheln mentions four certs as affected, but I
think that is too broad.
According to report, the ones affected are:
emSign_ECC_Root_CA_-_G3.crt aka "CN=emSign ECC Root CA - G3"
Comodo_AAA_Services_root.crt aka "CN=AAA Certificate Services"
These other ones are not affected at this time:
emSign_ECC_Root_CA_-_C3.crt aka "CN=emSign ECC Root CA - C3"
emSign_Root_CA_-_C1.crt aka "CN=emSign Root CA - C1"
emSign_Root_CA_-_G1.crt aka "CN=emSign Root CA - G1"
The patches that Salvatore mentions are correct and only include the two
affected ones and the others will not be removed at this time.
Thanks,
--
Matt Taggart
[email protected]