ca-certificates security update

2026.2.92v9.0.319-90.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-90.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-90.1 - Removing: AAA Certificate Services root CA - Removing: emSign ECC Root CA - G3 from...

CLSA-2026-1792702003 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "Amazon Root CA 1" Certificate "Amazon Root CA 2" Certificate "Amazon Root CA 3" Certificate "Amaz...

CLSA-2026-1792702049 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "OISTE Server Root RSA G1" Certificate "Amazon Root CA 1" Certificate "Amazon Root CA 2" Certifica...

Rocky Linux 8 [CIQ] Security Update: ca-certificates (crlba-2024_5736)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245736 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

Rocky Linux 9 [CIQ] Security Update: ca-certificates (crlba-2024_5691)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-20245691 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key...

SUSE SLES11 Security Update : openssl-certs (SUSE-SU-2026:4287-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4287-1 advisory. This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: - AffirmTrust Commercial - AffirmTrust Networking...

Security update for openssl-certs

This update for openssl-certs fixes the following issue: Updated to 2.90 state bsc1279961: Removed: AffirmTrust Commercial AffirmTrust Networking AffirmTrust Premium AffirmTrust Premium ECC certSIGN ROOT CA Entrust Root Certification Authority PKI Root Certification Authority FIRMAPROFESIONAL CA...

SUSE-SU-2026:4287-1 Security update for openssl-certs

This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority +...

SUSE CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

CVE-2026-61550

Icinga 2 (open source monitoring system) is vulnerable to improper access control in its JSON-RPC certificate update message handling (affected: 2.8 through 2.14.9, 2.15.4, and 2.16.2 ). The handler does not validate that the sender is a trusted endpoint, allowing an unauthenticated attacker with...

CVE-2026-61550: Missing Authorization

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

EUVD-2026-52969

open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-67855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled. This allows a remote...

CVE-2026-67855

open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service...

CVE-2026-67855

A flaw was found in open62541. This heap use-after-free vulnerability, occurring in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled, allows a remote attacker to cause a denial of service DoS. This could lead to the affected system becoming unavailable...

CVE-2026-67855

open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service...

CVE-2026-67855

open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service...

CVE-2026-67855

The open62541 C-based library contains a heap use-after-free vulnerability within the GDS PushManagement certificate update workflow. This issue occurs specifically when the UA_ENABLE_GDS_PUSHMANAGEMENT option is enabled. A remote attacker can exploit this flaw to cause a denial of service (DoS) ...

CVE-2026-67855

open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UAENABLEGDSPUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service...