CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
Percentile
23.8%
Disable bundled Trustcor root cerificate signatures generated after Wednesday November 30 00:00:00 2022. (CVE-2022-23491)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 8 | noarch | python-certifi | < 2022.12.7-1 | python-certifi-2022.12.7-1.mga8 |
bugs.mageia.org/show_bug.cgi?id=31248
github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8
lists.fedoraproject.org/archives/list/[email protected]/thread/XVERIAPNA4QIBOA26OBVAYISGS3HRQDC/
lists.opensuse.org/archives/list/[email protected]/thread/Y3LLORQTVTGQTFXP5FORJ4PISPVZLTEA/
lists.suse.com/pipermail/sle-security-updates/2023-January/013525.html
ubuntu.com/security/notices/USN-5761-1
utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem