3424 matches found
USN-8944-2: ca-certificates update
USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates. Original advisory details: This update remove...
CVE-2026-113812 Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...
CVE-2026-113812
The Mozilla::CA for Perl package, versions before 20261020 , contains a CA certificate bundle including the emSign ECC Root CA - G3 . This root is linked to intermediate certificates with publicly available private keys, potentially allowing an attacker who can intercept or redirect traffic to im...
CVE-2026-113812 Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates
Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...
CVE-2026-113659
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with the admin bundle. The parser accepts the specia...
EUVD-2026-105207
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with the admin bundle. The parser accepts the specia...
CVE-2026-113659
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with the admin bundle. The parser accepts the specia...
EUVD-2026-104698
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching...
CVE-2026-93315
A flaw was found in BuildKit. When proxy networking with Certificate Authority CA injection is enabled, a build can modify its CA certificate bundle before cleanup operations execute. A local user running a build can exploit this issue to cause the cleanup process to hang, resulting in a Denial o...
CLSA-2026-1792206332 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 15.5.25-tuxcare.3...
CLSA-2026-1792206328 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 16.0.6-tuxcare.4...
CLSA-2026-1792206327 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 16.0.6-tuxcare.9...
CLSA-2026-1792206331 TuxCare security update for @next/bundle-analyzer (2 CVEs)
TuxCare rebuilt @next/bundle-analyzer to address 2 CVEs. Fixed in 13.5.11-tuxcare.18...
CLSA-2026-1792206330 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 16.0.6-tuxcare.10...
CLSA-2026-1792206308 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 12.3.7-tuxcare.10...
CLSA-2026-1792206306 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 14.2.35-tuxcare.8...
CLSA-2026-1792206303 TuxCare security update for @next/bundle-analyzer (3 CVEs)
TuxCare rebuilt @next/bundle-analyzer to address 3 CVEs. Fixed in 14.2.35-tuxcare.6...
CLSA-2026-1792206305 TuxCare security update for @next/bundle-analyzer (1 CVE)
TuxCare rebuilt @next/bundle-analyzer to address 1 CVE. Fixed in 14.2.35-tuxcare.7...