ALSA-2026:88459: Critical: ca-certificates security update

Q: Which systems should be prioritized for this update?

Prioritize AlmaLinux systems that use the ca-certificates package as their PKI trust store, especially where services or applications may validate certificate chains involving eMudhra intermediate CA certificates.

Q: What compatibility impact could the update have?

Certificate chains that depend on the distrusted eMudhra intermediate CA certificates may no longer validate after the updated trust store is deployed. Review services, integrations, and endpoints that use certificates issued through those intermediates.

Q: How can I assess whether my environment is affected?

Identify systems with the AlmaLinux ca-certificates package installed and determine whether applications on those systems trust or connect to services presenting chains through eMudhra intermediate CA certificates.

Q: What should be done if patching is possible?

Apply the vendor-provided ca-certificates security update. The provided advisory does not specify a fixed package version or an alternative mitigation.

Published Oct 22, 2026

Updated

The ca-certificates package contains a set of Certificate Authority (CA) certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure (PKI).

Security Fix(es):

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns (CVE-2026-114406)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected componentFixes available

almalinux/ca-certificates<2026.2.92_v9.0.319-90.3.el9_8

2026.2.92_v9.0.319-90.3.el9_8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/ca-certificates to a version that resolves this vulnerability.
Fixed in 2026.2.92_v9.0.319-90.3.el9_8
Configuration
Distrust the eMudhra intermediate CA certificates in the ca-certificates trust store.
ca-certificates eMudhra intermediate CA certificates = distrusted

Event History

Oct 22, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Which systems should be prioritized for this update?

Prioritize AlmaLinux systems that use the ca-certificates package as their PKI trust store, especially where services or applications may validate certificate chains involving eMudhra intermediate CA certificates.

What compatibility impact could the update have?

Certificate chains that depend on the distrusted eMudhra intermediate CA certificates may no longer validate after the updated trust store is deployed. Review services, integrations, and endpoints that use certificates issued through those intermediates.

How can I assess whether my environment is affected?

Identify systems with the AlmaLinux ca-certificates package installed and determine whether applications on those systems trust or connect to services presenting chains through eMudhra intermediate CA certificates.

What should be done if patching is possible?

Apply the vendor-provided ca-certificates security update. The provided advisory does not specify a fixed package version or an alternative mitigation.

ALSA-2026:88459: Critical: ca-certificates security update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems should be prioritized for this update?

What compatibility impact could the update have?

How can I assess whether my environment is affected?

What should be done if patching is possible?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for this update?

What compatibility impact could the update have?

How can I assess whether my environment is affected?

What should be done if patching is possible?