ELSA-2026-500449

Опубликовано: 20 окт. 2026

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2026-500449: ca-certificates security update (IMPORTANT)

[2025.2.80_v9.0.304-80.2.0.1]

eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

ca-certificates

2025.2.80_v9.0.304-80.2.0.1.el8_10

Oracle Linux x86_64

ca-certificates

2025.2.80_v9.0.304-80.2.0.1.el8_10

Связанные CVE

CVE-2026-111943

CVE-2026-113470

Ссылки на источники

Связанные уязвимости

ELSA-2026-500496

oracle-oval

4 дня назад

ELSA-2026-500496: ca-certificates security update (IMPORTANT)

ELSA-2026-500451

oracle-oval

7 дней назад

ELSA-2026-500451: ca-certificates security update (IMPORTANT)

ELSA-2026-500450

oracle-oval

7 дней назад

ELSA-2026-500450: ca-certificates security update (IMPORTANT)

CVE-2026-113470

CVSS3: 5.4

ubuntu

4 дня назад

security update

CVE-2026-113470

CVSS3: 7.1

redhat

6 дней назад

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is disabled by policy or otherwise unavailable in the user's network environment. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, and Thunderbird 153.5.1.