File _patchinfo of Package patchinfo.14467

<patchinfo incident="14467">
  <issue tracker="bnc" id="1010996">With Firefox 50, ISRG X1 CA to ca-certificates-mozilla should be added</issue>
  <issue tracker="bnc" id="1154871">p11-kit-nss-trust breaks Firefox addon update check</issue>
  <issue tracker="bnc" id="1174673">VUL-0: openssl-certs,ca-certificates-mozilla: update to 2.42 release</issue>
  <issue tracker="bnc" id="1071152">Request updates for openssl-certs package</issue>
  <issue tracker="bnc" id="1071390">ca certificate update to include Amazon CAs</issue>
  <issue tracker="bnc" id="973042">Openssl-certs package does not contain new CAs from Certinomis and Entrust</issue>
  <packager>msmeissn</packager>
  <rating>important</rating>
  <category>recommended</category>
  <summary>Recommended update for ca-certificates-mozilla</summary>
  <description>This update for ca-certificates-mozilla fixes the following issues:

update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)

Removed CAs:

  * AddTrust External CA Root
  * AddTrust Class 1 CA Root
  * LuxTrust Global Root 2
  * Staat der Nederlanden Root CA - G2
  * Symantec Class 1 Public Primary Certification Authority - G4
  * Symantec Class 2 Public Primary Certification Authority - G4
  * VeriSign Class 3 Public Primary Certification Authority - G3

Added CAs:

  * certSIGN Root CA G2
  * e-Szigno Root CA 2017
  * Microsoft ECC Root Certificate Authority 2017
  * Microsoft RSA Root Certificate Authority 2017

- reverted p11-kit nss trust integration as it breaks in fresh installations (bsc#1154871)
</description>
</patchinfo>