Summary
[2025.2.80_v9.0.304-80.2.0.1]
- eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | ca-certificates | 0:2025.2.80_v9.0.304-80.2.0.1.el8_10 |
Vulnerabilities 3
-
Critical 9.1CVE-2026-114820 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 6.8CVE-2026-111943 Public exploit
Distrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…
-
Medium 5.4
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised c…