Red Hat Security Advisory

RHSA-2026:90985

ca-certificates and nss security update

Released 2026-10-27 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) ca-certificates-2026.2.92_v9.0.319-60.3.el6_10, nss-3.44.0-15.el6_10, nss-devel-3.44.0-15.el6_10 +2
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) nss-pkcs11-devel-3.44.0-15.el6_10

Fixes 1 record

TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq

Red Hat system CA store trusts weak eMudhra intermediate certificates

LOW 32

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0031 Published 2026-10-21 Partial fix · 2026.2.92_v9.0.319-100.3.el10_2, 2026.2.92_v9.0.319-100.3.el10_0 +138 CWE-295