Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

openSUSE ca-certificates-mozilla could trust fake certificates

published 13 days ago
Summary

The ca-certificates-mozilla package used in openSUSE Tumbleweed contained several security weaknesses that might allow malicious sites to be treated as trusted. This could enable attackers to intercept or spoof communications. Updating the package to the latest version from the GA media resolves the issue.

What to do
  • Update opensuse ca-certificates-mozilla to version 2.92-2.1.
Affected software
Ecosystem VendorProductAffected versions
openSUSE:Tumbleweed opensuse ca-certificates-mozilla < 2.92-2.1
Fix: upgrade to 2.92-2.1
Original advisory text
ca-certificates-mozilla-2.92-2.1 on GA media
These are all security issues fixed in the ca-certificates-mozilla-2.92-2.1 package on the GA media of openSUSE Tumbleweed.
Timeline
Published23 Oct 2026
Updated24 Oct 2026
First seen24 Oct 2026
Sources
Track software like this
Free during beta