ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA Private Key Spoofing ============= Ruby openssl has a vulnerability when a public key is a issued prior writing to private key and is reopened during a script it spoofs a CA private key. PoC script https://gist.github.com/10446549 Mitre:...

CA-Common-Services-privilege-escalation-cve-2016-9795-revisited

CA Common Services privilege escalation CVE-2016-9795 revisited Description In one of my pentests, I stumbled across the casrvc SUID binary which is part of CA Common Services suite. As I found out, the binary is vulnerable to local privilege escalation. As a matter of fact, a public CVE...

RLSA-2026:88459 Critical: ca-certificates security update

The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. Security Fixes: ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns CVE-2026-114406 For...

ca-certificates security update

An update is available for ca-certificates. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...

Critical: Red Hat Security Advisory: ca-certificates security update

An update for ca-certificates is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

Updated perl-Mozilla-CA package fixes a security vulnerability

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. CVE-2026-113812...

ALSA-2026:88550 Critical: ca-certificates security update

The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. Security Fixes: ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns CVE-2026-114406 For...

ca-certificates security update

2026.2.92v9.0.319-100.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-100.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-100.1 - Removing: AAA Certificate Services root CA - Removing: emSign ECC Root CA - G3 fr...

ca-certificates security update

2026.2.92v9.0.319-90.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-90.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-90.1 - Removing: AAA Certificate Services root CA - Removing: emSign ECC Root CA - G3 from...

ca-certificates security update

2026.2.92v9.0.319-81.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-81.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-81 - Update to CKBI 2.92v9.0.319 from NSS 3.131.1 Removing: - emSign Root CA - C1 Adding: -...

RHEL 8 : ca-certificates (RHSA-2026:88550)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:88550 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Publi...

RockyLinux 9 : ca-certificates (RLSA-2026:88459)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:88459 advisory. ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns CVE-2026-114406 Tenable has extracted the preceding description block...

CVE-2026-113812

Mozilla::CA versions before 20261020 for Perl provide a CA certificate...

ca-certificates security update

2025.2.80v9.0.304-71.0.2 - eMudhra: add 'emSign ECC Root CA - G3' and 'Comodo AAA Services root' to blocklist 2025.2.80v9.0.304-71.0.1 - Resolve ELBA-2025-22492 Orabug: 38712242 - Update to CKBI 2.80v9.0.304 from NSS 3.114 - Adding: - Certificate 'TWCA CYBER Root CA' - Certificate 'TWCA Global Ro...

Critical: ca-certificates security update

The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. Security Fixes: ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns CVE-2026-114406 For...

Critical: Red Hat Security Advisory: ca-certificates security update

An update for ca-certificates is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

Critical: Red Hat Security Advisory: ca-certificates security update

An update for ca-certificates is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...