Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-111943

Опубликовано: 23 окт. 2026
Источник: ubuntu
Приоритет: medium

Описание

(On most platforms, Go uses the given system root certificates. However ...)

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

stonking

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

stonking

needs-triage

upstream

needs-triage

Показывать по

Связанные уязвимости

CVSS3: 6.8
redhat
7 дней назад

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

nvd
6 дней назад

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

CVSS3: 7.4
msrc
4 дня назад

Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509

debian
6 дней назад

On most platforms, Go uses the given system root certificates. However ...

suse-cvrf
5 дней назад

Security update for go1.27