Re: [ptxdist] [PATCH v2 3/3] ca-certificates: version bump 3_130 -> 3_131_1

[Bruno Thomsen <bruno.thomsen@gmail.com>]

Hi

Den tirs. 27. okt. 2026 kl. 14.48 skrev Sven Püschel
<s.pueschel@pengutronix.de>:
>
> This fixes the compromised eMudhra intermediate certificates [1] by dropping
> the relevant root certificates:
> https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs

Version bump to later version[1] is already on mailing list:
ca-certificates: version bump 3.130 -> 3.132

/Bruno

[1] https://lore.ptxdist.org/ptxdist/20261026151347.9747-1-bruno.thomsen@gmail.com/T/#u

>
> [1] https://emudhra.we-have-a-problem.com/
>
> Signed-off-by: Sven Püschel <s.pueschel@pengutronix.de>
> ---
>  rules/ca-certificates.make | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make
> index edebddb2cc1cb5fb5f8b937bf123a47c4dfbcf01..2929cb55f130f417bba588a1a2eb2ca37212b94d 100644
> --- a/rules/ca-certificates.make
> +++ b/rules/ca-certificates.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) += ca-certificates
>  #
>  # Paths and names
>  #
> -CA_CERTIFICATES_VERSION                := NSS_3_130_RTM
> -CA_CERTIFICATES_SHA256         := beb7e6dfe6499926e52c075c27bcfbe4c957f8609c575b3860273ae2806f63eb
> +CA_CERTIFICATES_VERSION                := NSS_3_131_1_RTM
> +CA_CERTIFICATES_SHA256         := 3ec2b4d240dc12c747eaf450061db84af757c483bbda302f9e29ceb5d70be510
>  CA_CERTIFICATES                        := ca-certificates-$(CA_CERTIFICATES_VERSION)
>  CA_CERTIFICATES_SUFFIX         := txt
>  CA_CERTIFICATES_URL            := https://hg.mozilla.org/projects/nss/raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFICATES_SUFFIX)
>
> --
> 2.47.3
>
>