Skip to content

[Security] Bump certifi from 2023.5.7 to 2023.7.22

HIFIS Bot requested to merge dependabot-pip-certifi-2023.7.22 into main

Bumps certifi from 2023.5.7 to 2023.7.22. This update includes a security fix.

Vulnerabilities fixed

Removal of e-Tugra root certificate Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store.

e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems. Conclusions of Mozilla's investigation can be found here.

Patched versions: 2023.07.22 Affected versions: >= 2015.04.28, < 2023.07.22

Commits

Merge request reports