Medium RHSA-2026:90985 1 CVE

Red Hat Security Advisory: ca-certificates and nss security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 6

Release	Package	Fixed in
Red Hat · RHEL 6 ELS rhel_els:6	ca-certificates	0:2026.2.92_v9.0.319-60.3.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	nss	0:3.44.0-15.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	nss-devel	0:3.44.0-15.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	nss-pkcs11-devel	0:3.44.0-15.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	nss-sysinit	0:3.44.0-15.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	nss-tools	0:3.44.0-15.el6_10

Vulnerabilities 1

Medium 6.8

CVE-2026-114406

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certif…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux

Oct 21, 2026

References

article
https://access.redhat.com/security/updates/classification/#critical
report
https://bugzilla.redhat.com/show_bug.cgi?id=2556046
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90985.json
report
https://access.redhat.com/security/cve/CVE-2026-114406
article
https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
advisory
https://www.cve.org/CVERecord?id=CVE-2026-114406
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-114406