Hi Den tirs. 27. okt. 2026 kl. 14.48 skrev Sven Püschel <[email protected]>: > > This fixes the compromised eMudhra intermediate certificates [1] by dropping > the relevant root certificates: > https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs
Version bump to later version[1] is already on mailing list: ca-certificates: version bump 3.130 -> 3.132 /Bruno [1] https://lore.ptxdist.org/ptxdist/[email protected]/T/#u > > [1] https://emudhra.we-have-a-problem.com/ > > Signed-off-by: Sven Püschel <[email protected]> > --- > rules/ca-certificates.make | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make > index > edebddb2cc1cb5fb5f8b937bf123a47c4dfbcf01..2929cb55f130f417bba588a1a2eb2ca37212b94d > 100644 > --- a/rules/ca-certificates.make > +++ b/rules/ca-certificates.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates > # > # Paths and names > # > -CA_CERTIFICATES_VERSION := NSS_3_130_RTM > -CA_CERTIFICATES_SHA256 := > beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb > +CA_CERTIFICATES_VERSION := NSS_3_131_1_RTM > +CA_CERTIFICATES_SHA256 := > 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510 > CA_CERTIFICATES := > ca-certificates-$(CA_CERTIFICATES_VERSION) > CA_CERTIFICATES_SUFFIX := txt > CA_CERTIFICATES_URL := > https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX) > > -- > 2.47.3 > >
