RLBA-2024:5691

Synopsis

ca-certificates bug fix and enhancement update

Description

The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).

Bug Fix(es) and Enhancement(s):

* Annual 2024 ca-certificates update version 2.69 from NSS 3.101.1 for Firefox 128 [rhel-9.4.z] (JIRA:Rocky Linux-44988)

* Provide ca-certificates in directory format to resolve Application performance regression in OpenSSL [rhel-9.4.z] (JIRA:Rocky Linux-48129)

* calling update-ca-trust on Rocky Linux-9 should be supported with just about any argument [rhel-9.4.z] (JIRA:Rocky Linux-54698)

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

CVEs

Affected packages

Rocky Linux 9 x86_64 - BaseOS

ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.noarch.rpm ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.src.rpm

Rocky Linux 9 aarch64 - BaseOS

ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.noarch.rpm ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.src.rpm

Rocky Linux 9 s390x - BaseOS

ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.noarch.rpm ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.src.rpm

Rocky Linux 9 ppc64le - BaseOS

ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.noarch.rpm ca-certificates-0:2024.2.69_v8.0.303-91.4.el9_4.src.rpm