{"id":"CVE-2026-114406","aliases":["ALSA-2026:88455","ALSA-2026:88459","ALSA-2026:88550","BELL-CVE-2026-114406","EUVD-2026-107565","GHSA-jrx5-4fv3-4mcq","RLSA-2026:88455","RLSA-2026:88459","RLSA-2026:88550","SUSE-SU-2026:24361-1","SUSE-SU-2026:24373-1","SUSE-SU-2026:24383-1","SUSE-SU-2026:24414-1","SUSE-SU-2026:4820-1","SUSE-SU-2026:4847-1","openSUSE-SU-2026:12233-1"],"status":"published","title":"Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns","description":"The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0031,"percentile":0.24156,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2026-10-21T20:56:26Z","modified":"2026-11-11T06:32:31Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"ca-certificates","fixed_in":["2026.2.92_v9.0.319-100.3.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ca-certificates","fixed_in":["2026.2.92_v9.0.319-90.3.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ca-certificates","fixed_in":["2026.2.92_v9.0.319-81.3.el8_10"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ca-certificates","fixed_in":["20261020-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"ca-certificates","fixed_in":["20261020-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ca-certificates","fixed_in":["20261020-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"ca-certificates","fixed_in":["20261020-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"ca-certificates","fixed_in":["20261020-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"ca-certificates","fixed_in":["20261020-r0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"ca-certificates","fixed_in":["0:2026.2.92_v9.0.319-100.3.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"ca-certificates","fixed_in":["0:2026.2.92_v9.0.319-90.3.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"ca-certificates","fixed_in":["0:2026.2.92_v9.0.319-81.3.el8_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ca-certificates-mozilla","fixed_in":["2.92-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-160000.1.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ca-certificates-mozilla","fixed_in":["2.92-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-160000.1.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"ca-certificates-mozilla","fixed_in":["2.92-159998.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"ca-certificates-mozilla","fixed_in":["2.92-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"ca-certificates-mozilla","fixed_in":["2.92-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","package":"openssl-certs","fixed_in":["2.92-0.7.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ca-certificates-mozilla","fixed_in":["2.92-150200.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ca-certificates-mozilla-prebuilt","fixed_in":["2.92-150200.50.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ca-certificates-mozilla","fixed_in":["2.92-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.92_v9.0.319-100.3.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.92_v9.0.319-90.3.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026.2.92_v9.0.319-81.3.el8_10"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20220614-r3"},{"fixed":"20261020-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20241121-r2"},{"fixed":"20261020-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20220614-r3"},{"fixed":"20261020-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20220614-r3"},{"fixed":"20261020-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20241121-r2"},{"fixed":"20261020-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20220614-r3"},{"fixed":"20261020-r0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2026.2.92_v9.0.319-100.3.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2026.2.92_v9.0.319-90.3.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2026.2.92_v9.0.319-81.3.el8_10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-160000.1.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-160000.1.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-159998.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","package":"openssl-certs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-0.7.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ca-certificates-mozilla-prebuilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-150200.50.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ca-certificates-mozilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.92-2.1"}]}]}],"products":[{"vendor":"red hat","product":"agentic cluster security suite 0.2"},{"vendor":"red hat","product":"cost management 4"},{"vendor":"red hat","product":"red hat advanced cluster security for kubernetes 4.11"},{"vendor":"red hat","product":"red hat advanced cluster security for kubernetes for ibm power, little endian 4.10"},{"vendor":"red hat","product":"red hat ai inference server"},{"vendor":"red hat","product":"red hat ai inference server 3.5"},{"vendor":"red hat","product":"red hat cost management on-premise 1"},{"vendor":"red hat","product":"red hat developer hub 1"},{"vendor":"red hat","product":"red hat developer hub 2"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6 extended lifecycle support  - extension"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux ai (rhel ai) 3"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift ai 3.0"},{"vendor":"red hat","product":"red hat openshift ai 3.4"},{"vendor":"red hat","product":"red hat openshift ai 3.5"},{"vendor":"red hat","product":"red hat openshift builds 1.8.3"},{"vendor":"red hat","product":"red hat openshift builds 1.9.2"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift container platform 4.20"},{"vendor":"red hat","product":"red hat openshift container platform 4.21"},{"vendor":"red hat","product":"red hat openshift container platform 4.22"},{"vendor":"red hat","product":"red hat openshift container platform 5"},{"vendor":"red hat","product":"red hat openshift dev spaces 3.31"},{"vendor":"red hat","product":"red hat openshift for windows containers 11.0"},{"vendor":"red hat","product":"red hat openshift gitops 1.20"},{"vendor":"red hat","product":"red hat openshift gitops 1.21"},{"vendor":"red hat","product":"red hat openshift gitops 1.22"},{"vendor":"red hat","product":"red hat openstack platform 13.0 - els"},{"vendor":"red hat","product":"red hat openstack platform 16.2"},{"vendor":"red hat","product":"red hat openstack platform 17.1 for rhel 9"},{"vendor":"red hat","product":"red hat openstack services on openshift 18.0"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"red hat","product":"service interconnect 2 for rhel 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:86595","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88455","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88459","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88550","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88560","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88562","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88563","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88564","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88662","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88668","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88669","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88779","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89081","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89131","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89197","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89232","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89333","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89651","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89714","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89725","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89838","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89907","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90272","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90969","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90985","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91202","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91204","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91206","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91207","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91217","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91218","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91219","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91224","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91232","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91233","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91234","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91235","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91236","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91237","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91238","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91241","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91242","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91243","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91244","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91245","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91246","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91248","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91249","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91997","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92006","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92342","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93043","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93044","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93045","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93046","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94459","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94468","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94474","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94476","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94562","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94581","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94583","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94584","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94631","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94702","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94709","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94715","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94717","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94721","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94738","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:94802","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95058","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95090","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95264","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95365","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95745","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:96282","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-114406","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-012","tags":["technical-description","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556046","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114406"},{"url":"https://github.com/advisories/GHSA-jrx5-4fv3-4mcq"},{"url":"https://bugzilla.redhat.com/2556046","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-88455.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-88459.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-88550.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-114406","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:88455","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:88459","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:88550","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624361-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1286261","tags":["report"]},{"url":"https://bugzilla.suse.com/1287180","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-114406","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624373-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624383-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1279961","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624414-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264820-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264847-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-114406","title":"Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns","description":"The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.","status":"published","published":"2026-10-21T20:56:26.866Z","modified":"2026-11-11T05:51:46.836Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-11T06:54:11.720276Z"}],"euvd":[{"id":"EUVD-2026-107565","description":"The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.","status":"published","published":"2026-10-21T20:56:26Z","modified":"2026-11-11T05:51:46Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-11T07:27:42.761079Z"}],"ghsa":[{"id":"GHSA-jrx5-4fv3-4mcq","title":"The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates...","description":"The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.","status":"published","published":"2026-10-21T21:32:38Z","modified":"2026-11-11T06:32:31Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-295"],"updated_at":"2026-11-11T06:32:39.045552Z"}],"nvd":[{"id":"CVE-2026-114406","description":"The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.","status":"published","published":"2026-10-21T21:17:58.547Z","modified":"2026-11-11T06:17:11.933Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-11T12:24:42.742483Z"}],"osv":[{"id":"BELL-CVE-2026-114406","status":"published","published":"2026-10-22T06:11:58.45195Z","modified":"2026-10-28T07:15:05.718586923Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"RLSA-2026:88455","title":"Critical: ca-certificates security update","description":"The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).\n\nSecurity Fix(es):\n\n* ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-23T12:12:00.486754Z","modified":"2026-10-23T12:45:02.524786282Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:88459","title":"Critical: ca-certificates security update","description":"The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).\n\nSecurity Fix(es):\n\n* ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-23T06:45:57.706125Z","modified":"2026-10-23T07:15:03.236662682Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:88550","title":"Critical: ca-certificates security update","description":"The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).\n\nSecurity Fix(es):\n\n* ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-24T00:00:58.624421Z","modified":"2026-10-24T00:30:02.74124455Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"ALSA-2026:88455","title":"Critical: ca-certificates security update","description":"The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).  \n\nSecurity Fix(es):  \n\n  * ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-22T00:00:00Z","modified":"2026-10-29T11:31:11.603954685Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:88459","title":"Critical: ca-certificates security update","description":"The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).  \n\nSecurity Fix(es):  \n\n  * ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-22T00:00:00Z","modified":"2026-10-29T11:32:32.501823776Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:88550","title":"Critical: ca-certificates security update","description":"The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).  \n\nSecurity Fix(es):  \n\n  * ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-23T00:00:00Z","modified":"2026-10-29T11:02:25.318847176Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"openSUSE-SU-2026:12233-1","title":"ca-certificates-mozilla-2.92-2.1 on GA media","description":"These are all security issues fixed in the ca-certificates-mozilla-2.92-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-23T00:00:00Z","modified":"2026-10-24T17:23:10.297420065Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:24361-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issue:\n\nUpdated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n","status":"published","published":"2026-10-23T13:54:37Z","modified":"2026-10-29T17:23:10.654971403Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24373-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issue:\n\nUpdated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n","status":"published","published":"2026-10-23T13:54:55Z","modified":"2026-10-27T17:23:17.36250716Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24383-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issues:\n\nUpdated to 2.92 state (bsc#1286261 bsc#1287180 CVE-2026-114406)\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n\nUpdated to 2.90 state (bsc#1279961)\nRemoved:\n\n - AffirmTrust Commercial\n - AffirmTrust Networking\n - AffirmTrust Premium\n - AffirmTrust Premium ECC\n - certSIGN ROOT CA\n - Entrust Root Certification Authority\n - PKI Root Certification Authority\n - FIRMAPROFESIONAL CA ROOT-A WEB\n - GLOBALTRUST 2020\n - Secure Global CA\n - SecureSign Root CA12\n - SecureTrust CA\n - TeliaSonera Root CA v1\n - Trustwave Global Certification Authority\n - Trustwave Global ECC P256 Certification Authority\n - Trustwave Global ECC P384 Certification Authority\n - XRamp Global Certification Authority\n\nAdded:\n\n - SECOM SMIME RSA Root CA 2024\n - SECOM TLS ECC Root CA 2024\n - SECOM TLS RSA Root CA 2024\n - SecureSign Root CA16\n - Telia EC Email Root CA v3\n - Telia EC TLS Root CA v3\n - Telia RSA Email Root CA v3\n - Telia RSA TLS Root CA v3\n","status":"published","published":"2026-10-23T13:53:23Z","modified":"2026-10-27T17:23:19.464594666Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24414-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issue:\n\nUpdated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n","status":"published","published":"2026-10-23T13:54:37Z","modified":"2026-10-30T17:23:17.056134249Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4820-1","title":"Security update for openssl-certs","description":"This update for openssl-certs fixes the following issue:\n\nUpdated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)\n\nRemoved:\n\n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n","status":"published","published":"2026-10-23T12:48:07Z","modified":"2026-10-23T19:00:39.876459302Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4847-1","title":"Security update for ca-certificates-mozilla","description":"This update for ca-certificates-mozilla fixes the following issue:\n  \nUpdated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180)\nRemoved:\n  \n - emSign ECC Root CA - C3\n - emSign ECC Root CA - G3\n - emSign Root CA - C1\n","status":"published","published":"2026-10-23T13:11:40Z","modified":"2026-10-23T19:00:39.906676878Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}