RHBA-2020:2666 - Bug Fix Advisory

Topic

An update for ca-certificates is now available for Red Hat Enterprise Linux
7.

Description

The ca-certificates package contains a set of Certificate Authority (CA)
certificates chosen by the Mozilla Foundation for use with the Internet
Public Key Infrastructure (PKI).

Bug Fix(es) and Enhancement(s):

• AddTrust External Root CA certificate expiration causes cert validation

issue (BZ#1845707)

• Mismatches in %ghost file modes (BZ#1845849)
• Update ca-certificates package in RHEL 7.8z to CA trust list version

(2020) 2.53 from Firefox 78 (BZ#1845850)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1845707 - AddTrust External Root CA certificate expiration causes cert validation issue [rhel-7.8.z]
• BZ - 1845849 - Mismatches in %ghost file modes [rhel-7.8.z]
• BZ - 1845850 - Update ca-certificates package in RHEL 7.8z to CA trust list version (2020) 2.53 from Firefox 78 [rhel-7.8.z]

CVEs

(none)

References

(none)