SUSE-SU-2026:5130-1: Security update for python-certifi
This update for python-certifi fixes the following issues:
- CVE-2024-39689: remove root certificates from GLOBALTRUST from the root store (bsc#1227519). - Removed eMudhra Intermediates due to compromise (bsc#1286261, bsc#1287723).
Changes for python-certifi:
- Update to 2026.10.23.
Other sources
This update for python-certifi fixes the following issues: CVE-2024-39689: remove root certificates from GLOBALTRUST from the root store (bsc#1227519). Removed eMudhra Intermediates due to compromise (bsc#1286261, bsc#1287723). Changes for python-certifi: Update to 2026.10.23.
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/python-certifito a version that resolves this vulnerability.Fixed in 2026.10.23-150400.12.10.1 - Upgrade
Upgrade
suse/python311-certifito a version that resolves this vulnerability.Fixed in 2026.10.23-150400.12.10.1 - Upgrade
Upgrade
python-certifito a version that resolves this vulnerability.Fixed in 2026.10.23Patch SUSE-2026-5130 - Configuration
Remove the GLOBALTRUST root certificates and the compromised eMudhra intermediate certificates from the root store.
python-certifi root certificate store trusted certificates = remove GLOBALTRUST root certificates and eMudhra intermediates