Bug 2563319

Summary:	awscli2: Distrust eMudhra intermediate CA certificates due to security concerns [fedora-all]
Product:	[Fedora] Fedora	Reporter:	Tomas Hoger <thoger>
Component:	awscli2	Assignee:	Nikola Forró <nforro>
Status:	NEW ---	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	rawhide	CC:	davdunc, knivnia, nforro
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	{"flaws": ["82f8e4cd-4579-4a10-9f2c-e641831eafd4"]}
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2563310

Description Tomas Hoger 2026-10-29 11:27:17 UTC

Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Distrust eMudhra intermediate CA certificates due to security concerns in python-botocore

https://emudhra.we-have-a-problem.com/

botocore version 1.43.117 removed the Comodo AAA Certificate Services root CA to distrust eMudhra intermediate certificates:

https://github.com/boto/botocore/pull/3838
https://github.com/boto/botocore/commit/0a6c7b6b3e794e865193dee23c68adfadb6b9c04
https://github.com/boto/botocore/releases/tag/1.43.117