From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 27 Oct 2026 19:03:28 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xLlWC-0040qn-15 for lore@lore.pengutronix.de; Tue, 27 Oct 2026 19:03:28 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xLlWB-000173-Pl; Tue, 27 Oct 2026 19:03:27 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xLlW0-00016v-Fb for ptxdist@pengutronix.de; Tue, 27 Oct 2026 19:03:17 +0100 Received: from mail-oi1-x236.google.com (mail-oi1-x236.google.com [IPv6:2607:f8b0:4864:20::236]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 928D1200F4D for ; Tue, 27 Oct 2026 19:03:11 +0100 (CET) ARC-Seal: i=2; s=20260414; d=pengutronix.de; t=1793124191; a=rsa-sha256; cv=pass; b=Tkel31WcMUQQir47u3NKU1ooePlOBzg6Bl8z5eHxzU0OVz/iCiMjsxR8TYpue0S62MDGaj x+b3YMXjBWdYsugy4mCsb8QVAdP76uHIzzy6DUIGbGTkT3sBRVW1RjY/lx4yQkFr216OuF m0wB9JI9B02IRhcAxGnYcWfBUmQf48CFw+py5KUbZ8RTSIxmh9+sHmM1kiLh+HcdnRNAwB eqGYSz7mMJLKJLRWM4eHd6Hliw+rrXyB+O8r7kdCJZAEfsuWsTNu65VnPj4K+3n6vKZP2B CkIiXxtvEWjMPPaNY2VynKOaUkXtxByWxZbq5iNUve2pFllkqzeAi3AdGnliqQ== ARC-Authentication-Results: i=2; mx1.white.stw.pengutronix.de; dkim=pass header.d=gmail.com header.s=20260707 header.b=a+7cEgMX; spf=pass (mx1.white.stw.pengutronix.de: domain of bruno.thomsen@gmail.com designates 2607:f8b0:4864:20::236 as permitted sender) smtp.mailfrom=bruno.thomsen@gmail.com; dmarc=pass (policy=none) header.from=gmail.com; arc=pass ("google.com:s=arc-20260327:i=1") ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793124191; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=YDYONe4u++bU3V+7bpaCO4I4OpBt+QA8IAzLkrftBqU=; b=cskS+RYlOPtyvog06KpNaMpSsi3eFDMLSpXh4AIpV1N6BlxKaqbjUdVtALcpGmcRpd2BBG udpJF/mO+x9LD57oFQ1DBMDjNwqXuxL1B+gqoTZHdZQJ/ER3NsjzSK64z/nu7Iu2DiX8dm y53quWQj9xGLR7Qp9YxsiLxnaKXq7LQP5AEIN0iEQMwmAOgIN0chTtX11qjO9WjwVpn+7O DAOqWKpFx1ABQmzDkbx993jFIfw0cPpCw3YxXJPcETt9Rq0d0LYvllz6cYeKwtOVWg3XgF 4ofTiAbC4a54WMY1WeGgZ1NFIETrrxgnTVAQVwgXkADFDCaeyAL8onwNVpYi5w== Received: by mail-oi1-x236.google.com with SMTP id 5614622812f47-53656465d1dso96543b6e.2 for ; Tue, 27 Oct 2026 11:03:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1793124190; cv=none; d=google.com; s=arc-20260327; b=DnyzbjkjpQaPbvof7kJCXYo63U0qitIy1bYiSO5yj8tQvjeCCQf9mDSMbAhU2v5lrx vEMs2ACxD0TR8VWY1OSxAQfMVqVvqOOZdQ9OktyfRKQzVFJJi/zWnd6iwYupDs3lW7sC 8+ekBkWhR7AnlnQrLNfnC91bEsFNGUQldwr7Ptnm65WOMCeibWhCuOlbJhVGBK/NHtZc SLhvQT6vWW5u2pmPdFCK69tkbuxb1irwx9VTAK2fP9YE/wOUpLnVYBEjtdZg8ayOvU9U Cb+yl8XZ5UssU0f3UUMD61/j5E7Ruh5ulkhpsVppTFXrqZ2X+NKFafwZn0fMUqajn1o0 YAcg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=YDYONe4u++bU3V+7bpaCO4I4OpBt+QA8IAzLkrftBqU=; fh=35PL7kjJj3ZaaXccc+aYa0WbX38m+Z8n60BGya9azlI=; b=Miso9bsaneinTFsceWAYbeWtl5rgygnypQfa9bOiZh7n6Sq1CNkCdz+SR8djFBVeT4 FtJ0SY81wo9iusrpP4s8nwrz6vYc1vJJY/s1zXyxOWnpsWLmj5GDkhnDxIj8nZRpgYw2 sfEHBuENxUS/ck4jvq/fJjNaZFte64lLH9FaxqZyu7Cedc1YFy1StgYhLiIOEAHUiS67 nQq5/l9RvChf/4zTJOoh9ubaQux7NVVSqGWU8H6vb6YAoJ+ZGP52pv3CcVM13HIFU11V zWp5BEkILSzLqjA5zvoVYTVMIKlVAeQhLptHgE/98MYmwJuKX5khwsnJKqjwMrpc/Dwd eG7w==; darn=pengutronix.de ARC-Authentication-Results: i=1; mx.google.com; arc=none X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793124190; x=1793728990; h=content-transfer-encoding:content-type:to:subject:message-id:date :from:in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to:content-type; bh=YDYONe4u++bU3V+7bpaCO4I4OpBt+QA8IAzLkrftBqU=; b=w8rzuOEBaWcOGzTOrzwd3ah6TfSbVOnVliCdIx3+OoF4bmfbKfZEeJDzmHHZIXlrS7 y6RG8yj3tsSb+sNR3xlg98JFFxN1LZNlGpwRMqtQLGZfBFByxJtJE0YzWLy3ptekODKd ykqargELhs4/YgJzhoLkKpJvv1ssOrYffCjLFWKpmVm8zCR8W+mjPlSkhs7EB9ZRQ3Ng UFyCkvGtrAvK6GSp8Pwxzeul1xJYh3VJ+OQab0o/jkuQxjK+0Kf2nnaIfBlxZENqI+la NQ5dj46ooifVcXHqclGLC4UxkIdb9td2XZNdGEqz9J8a+zOKCaf/SD5g3cdQMP/Z2sJw d2HQ== X-Gm-Message-State: AFq9FYJEGoIn0HU2vnpo0bONqpsoFOxI4Zj3Q0JGwhkLxNb7o+CB7LZs pmU3YyUb59so61DNLhfeEppmFTEzDFkQECMyDuURdHG/y0CLRDNVPbgYG8PTtks2WhSl0n2fQ6m /nN2FJQGRwntwfMpmTBX9y5yzaUWJFC5H+Otu X-Gm-Gg: AYBFou0OFnqnhhz1x7xu1jneoeORoHjMKO3/EBKdHHqtzDSYXbauhlzqj0I1L0cganR /zNEY7CDpvwf/Cex4TCBZ57kCs4y0urFWEy1PrS6F0MSabJz0L5TcYhMU/DAMJ0EehcmEXMGJHr r4wj4RWIwD85fNK1L9UtcN25sW36R8K8uYSiLSj5EaxOMCF+CPGP+i4EP69v72yqxkLht7wPA7F zwZAK47D3p6j4Lz6s+Qvj6YT//PuNDRZmYJeg7ZvRh087Zh0xisqi5WQzPnWL06Rezj7baP0Gu1 sRufH6vrxDZUohqVwDBVIGq86c6LDSISZr88PHTn6czDNgJ57by3utv7Sxru6NWJFId6prmRpk+ KeVLKL7fwQoo8T6+vhKt2dBsy7I52XVHdp8Ma X-Received: by 2002:a05:6808:191c:b0:522:1ac7:a573 with SMTP id 5614622812f47-55c0032db41mr7717134b6e.43.1793124189511; Tue, 27 Oct 2026 11:03:09 -0700 (PDT) MIME-Version: 1.0 References: <20261027-fixemudhra-v2-0-11be14cb5ae4@pengutronix.de> <20261027-fixemudhra-v2-3-11be14cb5ae4@pengutronix.de> In-Reply-To: <20261027-fixemudhra-v2-3-11be14cb5ae4@pengutronix.de> From: Bruno Thomsen Date: Tue, 27 Oct 2026 19:02:53 +0100 X-Gm-Features: AclHuK9ohc5ASBWFWGMZSIhfU22yZ-JjlMkOKzaBg4R35xQJqbitT_O7iW-e1B4 Message-ID: To: ptxdist@pengutronix.de Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 928D1200F4D X-Spamd-Result: default: False [-5.00 / 15.00]; BAYES_HAM(-3.00)[100.00%]; ARC_ALLOW(-1.00)[google.com:s=arc-20260327:i=1]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20260707]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4864::/56]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TAGGED_FROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; FREEMAIL_FROM(0.00)[gmail.com]; FROM_HAS_DN(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; NEURAL_SPAM(0.00)[0.841]; PREVIOUSLY_DELIVERED(0.00)[ptxdist@pengutronix.de]; TO_DN_NONE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::236:from]; MID_RHS_MATCH_FROMTLD(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MISSING_XM_UA(0.00)[]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=2] X-Rspamd-Action: no action X-Stat-Signature: unp5btiino1fbrj4oaz5j8ntbud5k1fu X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.0 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FORGED_GMAIL_RCVD,FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,SPF_HELO_NONE autolearn=no autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH v2 3/3] ca-certificates: version bump 3_130 -> 3_131_1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Hi Den tirs. 27. okt. 2026 kl. 14.48 skrev Sven P=C3=BCschel : > > This fixes the compromised eMudhra intermediate certificates [1] by dropp= ing > the relevant root certificates: > https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/vSxZxnOMMvs Version bump to later version[1] is already on mailing list: ca-certificates: version bump 3.130 -> 3.132 /Bruno [1] https://lore.ptxdist.org/ptxdist/20261026151347.9747-1-bruno.thomsen@gm= ail.com/T/#u > > [1] https://emudhra.we-have-a-problem.com/ > > Signed-off-by: Sven P=C3=BCschel > --- > rules/ca-certificates.make | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/rules/ca-certificates.make b/rules/ca-certificates.make > index edebddb2cc1cb5fb5f8b937bf123a47c4dfbcf01..2929cb55f130f417bba588a1a= 2eb2ca37212b94d 100644 > --- a/rules/ca-certificates.make > +++ b/rules/ca-certificates.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_CA_CERTIFICATES) +=3D ca-certificate= s > # > # Paths and names > # > -CA_CERTIFICATES_VERSION :=3D NSS_3_130_RTM > -CA_CERTIFICATES_SHA256 :=3D beb7e6dfe6499926e52c075c27bcfbe4c957= f8609c575b3860273ae2806f63eb > +CA_CERTIFICATES_VERSION :=3D NSS_3_131_1_RTM > +CA_CERTIFICATES_SHA256 :=3D 3ec2b4d240dc12c747eaf450061db84af757= c483bbda302f9e29ceb5d70be510 > CA_CERTIFICATES :=3D ca-certificates-$(CA_CERTIFI= CATES_VERSION) > CA_CERTIFICATES_SUFFIX :=3D txt > CA_CERTIFICATES_URL :=3D https://hg.mozilla.org/projects/nss/= raw-file/$(CA_CERTIFICATES_VERSION)/lib/ckfw/builtins/certdata.$(CA_CERTIFI= CATES_SUFFIX) > > -- > 2.47.3 > >