This fixes the compromised eMudhra intermediate certificates [1] by dropping the relevant root certificates: https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs
[1] https://emudhra.we-have-a-problem.com/ Signed-off-by: Sven Püschel <[email protected]> --- rules/ca-certificates.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make index edebddb2cc1cb5fb5f8b937bf123a47c4dfbcf01..2929cb55f130f417bba588a1a2eb2ca37212b94d 100644 --- a/rules/ca-certificates.make +++ b/rules/ca-certificates.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates # # Paths and names # -CA_CERTIFICATES_VERSION := NSS_3_130_RTM -CA_CERTIFICATES_SHA256 := beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb +CA_CERTIFICATES_VERSION := NSS_3_131_1_RTM +CA_CERTIFICATES_SHA256 := 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510 CA_CERTIFICATES := ca-certificates-$(CA_CERTIFICATES_VERSION) CA_CERTIFICATES_SUFFIX := txt CA_CERTIFICATES_URL := https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX) -- 2.47.3
