From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mr6.vodafonemail.de (mr6.vodafonemail.de [145.253.228.166]) by sourceware.org (Postfix) with ESMTPS id E35E83858D1E for ; Sun, 12 Feb 2023 19:14:26 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org E35E83858D1E Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=nexgo.de Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=nexgo.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nexgo.de; s=vfde-smtpout-mb-15sep; t=1676229265; bh=CMGeeh4mbjf7QCZgw5QxFxAHTeo2PrQl3sIl3wlaC74=; h=From:To:Subject:Date:Message-ID:User-Agent:Content-Type:From; b=pN1vvwKCSLXfXV3D8FxPwdYLkmYrDIB5/wFlujMVUowufa3OizSIr7g/QfHUYIuwV cdznMiEFSZXo2Hh+AcxFxUsgamOwlOSW+kwaCSFHZdNyeYHN2cCDp17lW3ND4xTxop ESYACwOXbwiD+xd6QhwQGRW67OauDZue+VQz+xhA= Received: from smtp.vodafone.de (unknown [10.0.0.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by mr6.vodafonemail.de (Postfix) with ESMTPS id 4PFHG96Wq7z1yJ6 for ; Sun, 12 Feb 2023 19:14:25 +0000 (UTC) Received: from Gertrud (p57b9d9db.dip0.t-ipconnect.de [87.185.217.219]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp.vodafone.de (Postfix) with ESMTPSA id 4PFHG548TZzKm4k for ; Sun, 12 Feb 2023 19:14:18 +0000 (UTC) From: Achim Gratz To: cygwin-announce@cygwin.com Subject: Re-Release: ca-certificates-2022.2.60-3 Date: Sun, 12 Feb 2023 20:14:11 +0100 Message-ID: <877cwm66ik.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-purgate-type: clean X-purgate: clean X-purgate-size: 2141 X-purgate-ID: 155817::1676229261-927FB4F8-AE07C8E9/0/0 X-Spam-Status: No, score=-3031.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,KAM_NUMSUBJECT,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: The following packages have been uploaded to the Cygwin distribution: ca-certificates-2022.2.60-1 ca-certificates-letsencrypt-2022.2.60-1 This re-release fixes an upstream and a packaging bug that arises because p11kit makes certain directories unwritable after population. This becomes noticeable only when the user invoking those scripts is not an administrator (or more specifically on Windows doesn't have SeBackupPrivilege and SeRestorePrivilege). Please note that the fix temporarily needs to make the directory writable, which will again fail if the user attempting to do that has insufficient rights for this operation. Mozilla's CA root certificates for use with OpenSSL, NSS, GnuTLS, and other software that handles certificate verification. This is an update to the latest upstream release. This update contains the ca-certificates-letsencrypt package, whose installation will make the ISRG R3 intermediate CA a trust anchor and removes trust for the already expired DST X3 root CA (this should strictly not be necessary, but works around bugs present in some libraries in how alternate chains are constructed and verified). This will allow to successfully verify certificates using the Letsencrypt legacy cert chain in certain applications. Install this package when you currently have trouble accessing sites (due to validation complaining about an expired certificate) that had no problems until about September 30 or October 1 2021 depending on your timezone. The release numbering scheme has been aligned with Fedora. -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL.