Certifi Security Update (MINDBREEZE26358)
ID: MINDBREEZE26358
Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS
Severity: 7.5 Important
Status: Final
First published: March 15, 2023
CVE: CVE-2022-23491
Summary
Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. TrustCor's root certificates are being removed pursuant to an investigation prompted by media reporting that TrustCor's ownership also operated a business that produced spyware.
Hotfix Information
Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:
-
Mindbreeze InSpire 23.1 Release (Version 23.1.0.410)
-
Mindbreeze InSpire Saas 23.1 Release (Version 23.1.0.410)