Bug 2558237
| Summary: | python-certifi: Distrust eMudhra intermediate CA certificates due to security concerns | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | urgent | Docs Contact: | |
| Priority: | urgent | ||
| Version: | unspecified | CC: | abarbaro, akhatavk, alinfoot, alizardo, amctagga, anpicker, anthomas, aoconnor, aos-team-art-private, aprice, asdas, bbrownin, blitton, bniver, brasmith, cahl, cmyers, cochase, crizzo, dfreiber, dkeler, dnakabaa, doconnor, dpaolell, dranck, drow, dschmidt, dtrifiro, dymurray, eborisov, ebourniv, eglynn, ehelms, flucifre, gbenhaim, ggainey, gmeno, gparvin, groman, gtanzill, hasun, hoberger, ibolton, ilpinto, jbalunas, jburrell, jbuscemi, jchui, jdelft, jdobes, jfula, jhe, jholecek, jjoyce, jlanda, jmatthew, jmitchel, jmontleo, jowilson, jpasqual, jpretori, jsamir, jschluet, jupierce, juwatts, jwong, kaycoth, kbempah, kgaikwad, kshier, ktsao, lball, lblicha, lbrazdil, lcouzens, lgarciaa, lhh, ljawale, lpele, ltomasbo, mbarnett, mbenjamin, mbiarnes, mburns, mdellweg, mgarciac, mhackett, mhayden, mhulan, mminar, mrunge, msilmser, mwoodson, nboldt, ngough, niyer, nmoumoul, nyancey, oaljalju, oezr, ogajduse, omaciel, ometelka, orabin, osousa, pakotvan, pcreech, pgaikwad, ppalepu, ppostler, prdhamdh, prwatson, psrna, ptisnovs, rbiba, rbobbitt, rchan, rekumar, rhaigner, rhel-process-autobot, rjohnson, sarad, sbunciak, sdoran, sghai, sidsharm, simaishi, slucidi, smallamp, solenoci, sostapov, sprizend, sseago, sskracic, stcannon, sthirugn, suppawar, syedriko, thason, tmalecek, tpfromme, tsze, twaugh, vereddy, veshanka, vimartin, vkumar, vlaad, vvoronko, watson-tool-maintainers, weaton, xdharmai, yguenane, ykashtan, zhunting, zzhou |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
The certificate authority (CA) store used in Python Certifi included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client applications using certifi and cause such applications to connect to malicious sites.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2563693, 2563923, 2558310, 2563689, 2563922 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-21 12:05:06 UTC
|