Recommended update for ca-certificates, p11-kit

Announcement ID: SUSE-RU-2022:1178-1
Rating: moderate
References:
Affected Products:
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Software Development Kit 12 SP5

An update that has two fixes can now be installed.

Description:

This update for ca-certificates, p11-kit fixes the following issues:

Changes in p11-kit:

  • call update-ca-certificates in post to make sure certs are regenerated even if ca-certificates was installed before p11-kit for whatever reason (bsc#1196443)
  • make sure p11-kit components have matching versions (bsc#1196812)

Changes in ca-certificates:

  • Require p11-kit-tools > 0.23.1 as older versions don't support pem-directory-hash (bsc#1196443, bsc#1196812)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Software Development Kit 12 SP5
    zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-1178=1
  • SUSE Linux Enterprise High Performance Computing 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1178=1
  • SUSE Linux Enterprise Server 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1178=1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1178=1

Package List:

  • SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)
    • p11-kit-debugsource-0.23.2-8.6.1
    • p11-kit-debuginfo-0.23.2-8.6.1
    • p11-kit-devel-0.23.2-8.6.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
    • ca-certificates-1_201403302107-15.6.2
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
    • p11-kit-tools-0.23.2-8.6.1
    • libp11-kit0-debuginfo-0.23.2-8.6.1
    • libp11-kit0-0.23.2-8.6.1
    • p11-kit-debuginfo-0.23.2-8.6.1
    • p11-kit-debugsource-0.23.2-8.6.1
    • p11-kit-nss-trust-0.23.2-8.6.1
    • p11-kit-tools-debuginfo-0.23.2-8.6.1
    • p11-kit-0.23.2-8.6.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64)
    • p11-kit-32bit-0.23.2-8.6.1
    • libp11-kit0-debuginfo-32bit-0.23.2-8.6.1
    • libp11-kit0-32bit-0.23.2-8.6.1
    • p11-kit-debuginfo-32bit-0.23.2-8.6.1
  • SUSE Linux Enterprise Server 12 SP5 (noarch)
    • ca-certificates-1_201403302107-15.6.2
  • SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
    • p11-kit-tools-0.23.2-8.6.1
    • libp11-kit0-debuginfo-0.23.2-8.6.1
    • libp11-kit0-0.23.2-8.6.1
    • p11-kit-debuginfo-0.23.2-8.6.1
    • p11-kit-debugsource-0.23.2-8.6.1
    • p11-kit-nss-trust-0.23.2-8.6.1
    • p11-kit-tools-debuginfo-0.23.2-8.6.1
    • p11-kit-0.23.2-8.6.1
  • SUSE Linux Enterprise Server 12 SP5 (s390x x86_64)
    • libp11-kit0-debuginfo-32bit-0.23.2-8.6.1
    • libp11-kit0-32bit-0.23.2-8.6.1
    • p11-kit-32bit-0.23.2-8.6.1
    • p11-kit-debuginfo-32bit-0.23.2-8.6.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
    • ca-certificates-1_201403302107-15.6.2
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
    • p11-kit-tools-0.23.2-8.6.1
    • libp11-kit0-debuginfo-0.23.2-8.6.1
    • libp11-kit0-0.23.2-8.6.1
    • p11-kit-debuginfo-0.23.2-8.6.1
    • p11-kit-debugsource-0.23.2-8.6.1
    • p11-kit-nss-trust-0.23.2-8.6.1
    • p11-kit-tools-debuginfo-0.23.2-8.6.1
    • p11-kit-0.23.2-8.6.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64)
    • p11-kit-32bit-0.23.2-8.6.1
    • libp11-kit0-debuginfo-32bit-0.23.2-8.6.1
    • libp11-kit0-32bit-0.23.2-8.6.1
    • p11-kit-debuginfo-32bit-0.23.2-8.6.1

References: