jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

ca-certificates: Fix of CVE-2026-114406

Comodo AAA Services root AAA Certificate Services is no longer trusted for TLS server authentication through the legacy bundle: it issued the Sectigo cross-signs of the compromised eMudhra intermediates Mozilla bug 2083449. Its legacy e-mail and code-signing trust is kept...

CVE-2026-103410

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

PT-2026-128286

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate...

Juniper Networks Session Smart Router digital error vulnerability

A security vulnerability exists in Juniper Networks Session Smart Router versions prior to 7.0.5, from 7.1.0 up to but not including 7.1.7, and from 7.2.0 up to but not including 7.2.3. This vulnerability stems from an integer overflow in the DPI certificate scanner; unauthenticated remote...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143718 advisory. phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose...

CVE-2026-115570

The Electron framework, used for building cross-platform desktop applications, is vulnerable in versions prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6 . The root cause is the failure to block compromised eMudhra intermediate certificates across Chromium networking , Node.js tls , Node.js h...

CVE-2026-115570 Electron: Mitigation for compromised eMudhra intermediate certificates

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...

[SECURITY] [DSA 6580-1] erlang security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6580-1 [email protected] https://www.debian.org/security/ Aron Xu October 23, 2026 https://www.debian.org/security/faq -...

PT-2026-122200

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch...

Debian dsa-6580 : erlang - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6580 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6580-1 [email protected] https://www.debian.org/securit...

PT-2026-135234

update to CKBI 2.92 from NSS 3.131.1 - updated certificates: - Certificate "OISTE Server Root RSA G1" - Certificate "Amazon Root CA 1" - Certificate "Amazon Root CA 2" - Certificate "Amazon Root CA 3" - Certificate "Amazon Root CA 4" - Certificate "GlobalSign ECC Root CA - R4" - Certificate "GTS...

CVE-2026-113812

A flaw was found in Mozilla::CA. The Certificate Authority CA bundle includes a root certificate linked to compromised intermediate certificates. A remote attacker capable of intercepting or redirecting network traffic could exploit this flaw using the compromised keys to impersonate a Transport...

Red Hat: CVE-2026-113812: perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...

CLSA-2026-1791820273 python3.9: Fix of 2 CVEs

CVE-2026-19445: prevent use-after-free in the TLS server name callback when switching SSL contexts - CVE-2026-19553: validate SSLObject server hostname and session parameters before wrapping memory BIOs...

CLSA-2026-1787735855 java-1.8.0-openjdk: Fix of 5 CVEs

Update to shenandoah-jdk8u504-b01 - Security fixes from OpenJDK 8u504-b01: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server...

SUSE SLES12: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:4515-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4515-1 advisory. - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907:...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: improve resource resolving bsc1275777. CVE-2026-61308: enhance HTTP connections bsc1275778. CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to jdk-11.0.32.1+1 August 2026 CSPU Patch...

SUSE-SU-2026:4515-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to jdk-11.0.32.1+1 August 2026 CSPU...

MikroTik RouterOS Improper Verification of Cryptographic Signature (CVE-2026-67278)

MikroTik RouterOS accepts malformed RSA/PKCS1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use...