*** This bug is a security vulnerability *** Public security bug reported:
The ca-certificates packages should remove the Trustcor certificates. Background: https://www.washingtonpost.com/technology/2022/11/30/trustcor-internet-authority-mozilla/ Upstream decision: https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ Upstream commit: https://hg.mozilla.org/projects/nss/rev/a871902c05907db3150ac8b7f6a80dd01b5d38c9 ** Affects: ca-certificates (Ubuntu) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Trusty) Importance: High Assignee: Leonidas S. Barbosa (leosilvab) Status: New ** Affects: ca-certificates (Ubuntu Xenial) Importance: High Assignee: Leonidas S. Barbosa (leosilvab) Status: New ** Affects: ca-certificates (Ubuntu Bionic) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Focal) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Jammy) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Kinetic) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Lunar) Importance: High Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Also affects: ca-certificates (Ubuntu Lunar) Importance: Undecided Status: New ** Also affects: ca-certificates (Ubuntu Kinetic) Importance: Undecided Status: New ** Also affects: ca-certificates (Ubuntu Focal) Importance: Undecided Status: New ** Also affects: ca-certificates (Ubuntu Jammy) Importance: Undecided Status: New ** Also affects: ca-certificates (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: ca-certificates (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: ca-certificates (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: ca-certificates (Ubuntu Bionic) Status: New => In Progress ** Changed in: ca-certificates (Ubuntu Focal) Status: New => In Progress ** Changed in: ca-certificates (Ubuntu Jammy) Status: New => In Progress ** Changed in: ca-certificates (Ubuntu Kinetic) Status: New => In Progress ** Changed in: ca-certificates (Ubuntu Lunar) Status: New => In Progress ** Changed in: ca-certificates (Ubuntu Bionic) Importance: Undecided => High ** Changed in: ca-certificates (Ubuntu Bionic) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: ca-certificates (Ubuntu Focal) Importance: Undecided => High ** Changed in: ca-certificates (Ubuntu Focal) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: ca-certificates (Ubuntu Jammy) Importance: Undecided => High ** Changed in: ca-certificates (Ubuntu Jammy) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: ca-certificates (Ubuntu Kinetic) Importance: Undecided => High ** Changed in: ca-certificates (Ubuntu Kinetic) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: ca-certificates (Ubuntu Lunar) Importance: Undecided => High ** Changed in: ca-certificates (Ubuntu Lunar) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ca-certificates in Ubuntu. https://bugs.launchpad.net/bugs/1998785 Title: Remove Trustcor certificates Status in ca-certificates package in Ubuntu: In Progress Status in ca-certificates source package in Trusty: New Status in ca-certificates source package in Xenial: New Status in ca-certificates source package in Bionic: In Progress Status in ca-certificates source package in Focal: In Progress Status in ca-certificates source package in Jammy: In Progress Status in ca-certificates source package in Kinetic: In Progress Status in ca-certificates source package in Lunar: In Progress Bug description: The ca-certificates packages should remove the Trustcor certificates. Background: https://www.washingtonpost.com/technology/2022/11/30/trustcor-internet-authority-mozilla/ Upstream decision: https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ Upstream commit: https://hg.mozilla.org/projects/nss/rev/a871902c05907db3150ac8b7f6a80dd01b5d38c9 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1998785/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
