Certifi Security Update (MINDBREEZE26358)

ID: MINDBREEZE26358 
Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS 
Severity: 7.5 Important 
Status: Final 
First published: March 15, 2023 
CVE: CVE-2022-23491 

Summary

Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware.

 

Hotfix Information

Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS: 

  • Mindbreeze InSpire 23.1 Release (Version 23.1.0.410) 

  • Mindbreeze InSpire Saas 23.1 Release (Version 23.1.0.410)