Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0yNDh2LTM0NnctOWN3Y84AA9m3

Certifi removes GLOBALTRUST root certificate

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store.

GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues". Conclusions of Mozilla's investigation can be found here.

Permalink: https://github.com/advisories/GHSA-248v-346w-9cwc
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yNDh2LTM0NnctOWN3Y84AA9m3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: 2 months ago
Updated: 2 months ago

Identifiers: GHSA-248v-346w-9cwc, CVE-2024-39689
References:

• https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc
• https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463
• https://nvd.nist.gov/vuln/detail/CVE-2024-39689
• https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI
• https://github.com/advisories/GHSA-248v-346w-9cwc

Repository: https://github.com/certifi/python-certifi
Blast Radius: 0.0

Affected Packages