Fedora 40 : mingw-python-certifi (2024-599bb2cb73)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-599bb2cb73 advisory. Update to 2024.7.4. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

SUSE CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

OPENSUSE-SU-2024:14118-1 python310-certifi-2024.7.4-1.1 on GA media

These are all security issues fixed in the python310-certifi-2024.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

Insufficient Verification Of Data Authenticity

certifi is vulnerable to Insufficient Verification of Data Authenticity. The vulnerability is due to its historical inclusion of root certificates from GLOBALTRUST for SSL certificate validation, after which these certificates were removed due to ongoing compliance issues identified during an...

CVE-2024-39689

A flaw was found in Certifi, a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certain versions of Certifi recognized root certificates from 'GLOBALTRUST'. However, pursuant to an investigation that identifi...

1337x (=1.2.5), 170051277-trab-final-gces (>=0.3.0 <=0.5.0) +2101 more potentially affected by CVE-2024-39689 via certifi (>=2021.5.30 <=2024.6.2)

certifi PYPI version =2021.5.30, =0.3.0, =0.1.0, =0.2.1, =0.1.2, =1.0.0, =1.0.4, =1.0.11, =2.3.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-39689 Source advisory: OSV:GHSA-248V-346W-9CWC...

Certifi removes GLOBALTRUST root certificate

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store. GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues...

GHSA-248V-346W-9CWC Certifi removes GLOBALTRUST root certificate

Certifi 2024.07.04 removes root certificates from "GLOBALTRUST" from the root store. These are in the process of being removed from Mozilla's trust store. GLOBALTRUST's root certificates are being removed pursuant to an investigation which identified "long-running and unresolved compliance issues...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: reflex, kubeflow-pipelines-visualization-server, dask-gateway, az, py3-torchvision-cuda-11.8, superset, nvidia-nsight-compute-13.1, airflow, kubeflow-jupyter-web-app, checkov, kubeflow-katib, request-1276, jwt-tool, mlflow, nvidia-nsight-compute-13.2, py3-pipenv,...

CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

1337x (=1.2.5), 170051277-trab-final-gces (>=0.3.0 <=0.5.0) +2101 more potentially affected by CVE-2024-39689 via certifi (>=2021.5.30 <=2024.6.2)

certifi PYPI version =2021.5.30, =0.3.0, =0.1.0, =0.2.1, =0.1.2, =1.0.0, =1.0.4, =1.0.11, =2.3.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-39689 Source advisory: OSV:PYSEC-2024-230...

DEBIAN-CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

PYSEC-2024-230

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.05.30 and prior to 2024.07.4 recognized root certificates from GLOBALTRUST. Certifi 2024.07.04 removes root certificates...

CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

UBUNTU-CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

CVE-2024-39689 Certifi removes GLOBALTRUST root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

CVE-2024-39689 Certifi removes GLOBALTRUST root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

CVE-2024-39689

Certifi-2024-39689 involves insufficient verification of data authenticity via the GlobalTrust root certificate. The issue stems from Certifi removing GLOBALTRUST roots in 2024.7.04, in line with Mozilla’s trust-store removals prompted by long-running compliance issues. Broadcom/BSNSA36222 confir...

CVE-2024-39689 Certifi removes GLOBALTRUST root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...