Description
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| certifi | python-certifi | >= 2015.04.28, < 2023.07.22 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-certifi | 2023.7.22-1 | — |
| Debian 13 | python-certifi | 2023.7.22-1 | — |
| Debian 12 | python-certifi | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | python-pip | No fix yet | — |
| Ubuntu 20.04 LTS | python-certifi | No fix yet | — |
| Ubuntu 18.04 LTS | python-certifi | No fix yet | — |
| Ubuntu 16.04 LTS | python-certifi | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | python-pip | No fix yet | — |
| Ubuntu Pro 18.04 LTS | python-pip | No fix yet | — |
| Ubuntu Pro 16.04 LTS | python-pip | No fix yet | — |
| Ubuntu Pro 14.04 LTS | python-pip | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | ca-certificates | 2024.2.69_v8.0.303-91.4.el9_4 | RHBA-2024:5691 |
| RHEL 9 | fence-virt +55 | 4.10.0-55.el9_3.2 | RHSA-2023:7753 |
| RHEL 8 | ca-certificates | 2024.2.69_v8.0.303-80.0.el8_10 | RHBA-2024:5736 |
| RHEL 8 | fence-agents +47 | 4.2.1-121.el8_9.2 | RHSA-2024:0133 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | fence-virt +55 | 4.10.0-43.el9_2.2 | RHSA-2023:7378 |
| RHEL 9.0 EUS | fence-virt +56 | 4.10.0-20.el9_0.10 | RHSA-2023:7385 |
| RHEL 8.8 EUS | fence-agents +47 | 4.2.1-112.el8_8.2 | RHSA-2023:7528 |
| RHEL 8.6 EUS | fence-agents +46 | 4.2.1-89.el8_6.10 | RHSA-2023:7407 |
| RHEL 8.4 TUS | fence-agents +45 | 4.2.1-65.el8_4.13 | RHSA-2023:7523 |
| RHEL 8.4 E4S | fence-agents +46 | 4.2.1-65.el8_4.13 | RHSA-2023:7523 |
| RHEL 8.4 AUS | fence-agents +45 | 4.2.1-65.el8_4.13 | RHSA-2023:7523 |
| RHEL 8.2 TUS | fence-agents +41 | 4.2.1-41.el8_2.12 | RHSA-2023:7435 |
| RHEL 8.2 E4S | fence-agents +42 | 4.2.1-41.el8_2.12 | RHSA-2023:7435 |
| RHEL 8.2 AUS | fence-agents +37 | 4.2.1-41.el8_2.12 | RHSA-2023:7435 |
| RHEL 8.1 E4S | fence-agents +42 | 4.2.1-30.el8_1.10 | RHSA-2023:6812 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | fence-virt +54 | 4.10.0-55.el9_3.2.alma.1 | ALSA-2023:7753 |
| AlmaLinux 8 | ca-certificates | 2024.2.69_v8.0.303-80.0.el8_10 | ALBA-2024:5736 |
| AlmaLinux 8 | fence-agents-all +46 | 4.2.1-121.el8_9.2 | ALSA-2024:0133 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.18 | py3-certifi | 2023.7.22-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | ca-certificates | 2023.2.60-1.0.amzn2023.0.3 | ALAS2023-2023-297 |
| Amazon Linux 2 | ca-certificates | 2021.2.50-72.amzn2.0.8 | ALAS2-2023-2224 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-certifi | 2023.05.07-1.cm2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | fence-virt +47 | 4.10.0-55.el9_3.2 | ELSA-2023-7753 |
| Oracle Linux 8 | fence-agents-all +40 | 4.2.1-121.el8_9.2 | ELSA-2024-0133 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | conda | 23.7.2-r1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | certifi | >= 2015.4.28, < 2023.7.22 | 2023.7.22 | GHSA-xqr8-7jwr-rhp7 |
Advisories 31
- ALSA-2023:7753 Moderate: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
- ALBA-2024:5736 Low: ca-certificates bug fix and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0133 Moderate: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2023-2862 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2024:0133 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7753 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7523 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7528 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7435 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7385 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7407 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:7378 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2023:6812 Red Hat Security Advisory: fence-agents bug fix, enhancement, and security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHBA-2024:5691 Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHBA-2024:5736 Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- WID-SEC-2023-2964 Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 24, 2025
- WID-SEC-2024-1656 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 10, 2025
- WID-SEC-2024-1642 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 20, 2024
- NCSC-2024-0416 Kwetsbaarheden verholpen in Oracle Financial Services Applications NCSC-NL (Netherlands) · Oct 17, 2024
- NCSC-2024-0415 Kwetsbaarheden verholpen in Oracle Enterprise Manager NCSC-NL (Netherlands) · Oct 17, 2024
- NCSC-2024-0412 Kwetsbaarheden verholpen in Oracle Peoplesoft NCSC-NL (Netherlands) · Oct 17, 2024
- NCSC-2024-0411 Kwetsbaarheden verholpen in Oracle Database producten NCSC-NL (Netherlands) · Oct 17, 2024
- WID-SEC-2024-2136 Mehrere NetApp Produkte: Schwachstelle ermöglicht Denial of Service, Offenlegung von Informationen und Manipulation von Daten BSI CERT-Bund (WID) · Sep 12, 2024
- NCSC-2024-0303 Kwetsbaarheden verholpen in Oracle MySQL NCSC-NL (Netherlands) · Jul 17, 2024
- NCSC-2024-0294 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Jul 17, 2024
- SSA-806742 SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 Siemens ProductCERT · Feb 13, 2024
- ICSA-24-046-11 Siemens SCALANCE XCM-/XRM-300 CISA ICS & IT advisories · Feb 13, 2024
- ELSA-2024-0133 Moderate: fence-agents security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jan 11, 2024
- ELSA-2023-7753 Moderate: fence-agents security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Dec 18, 2023
- ALAS2-2023-2224 Important: ca-certificates security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 7, 2023
- ALAS2023-2023-297 Important: ca-certificates security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 23, 2023
References
- https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7
- https://github.com/certifi/python-certifi/commit/8fb96ed81f71e7097ed11bc4d9b19afd7ea5c909
- https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/C-HrP1SEq1A
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EX6NG7WUFNUKGFHLM35KHHU3GAKXRTG/