Bug 6853 - [Anolis OS 23] Bugfix for CVE-2023-37920
Summary: [Anolis OS 23] Bugfix for CVE-2023-37920
Status: RESOLVED FIXED
Alias: None
Product: Anolis OS 23
Classification: Anolis OS
Component: BaseOS Packages (show other bugs) BaseOS Packages
Version: unspecified
Hardware: All Linux
: P1-Urgent S1-blocker
Target Milestone: ---
Assignee: happy_orange
QA Contact: bolong_tbl
URL:
Whiteboard:
Keywords: CVE
Depends on:
Blocks:
 
Reported: 2023-10-17 11:32 UTC by 小龙
Modified: 2023-10-17 11:35 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description 小龙 admin 2023-10-17 11:32:17 UTC 
Description:
Certifi是根证书的精选集合，用于验证SSL证书的可信度，同时验证TLS主机的身份。2023.07.22之前版本的Certifi可识别e-Tugra根证书。e-Tugra的根证书因系统安全问题报告而接受调查。Certifi2023.07.22从根存储中删除e-Tugra中的根证书。

Broken commit info:

Bugfix commit info:
https://github.com/certifi/python-certifi/commit/8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909