ALSA-2026:88455: Critical: ca-certificates security update
Published Oct 22, 2026
·Updated
The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).
Security Fix(es):
ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
1 affected componentFixes available
almalinux/ca-certificates<2026.2.92_v9.0.319-100.3.el10_2
2026.2.92_v9.0.319-100.3.el10_2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/ca-certificatesto a version that resolves this vulnerability.Fixed in 2026.2.92_v9.0.319-100.3.el10_2 - Configuration
Distrust the eMudhra intermediate CA certificates due to the security concerns identified in CVE-2026-114406.
ca-certificates eMudhra intermediate CA certificates trust status = distrusted
Event History
Oct 22, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software