CVE catalog

CVE-2026-114406

Security update for ca-certificates-mozilla

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.31% · Oct 27, 2026

This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suseca-certificates-mozillalinux enterprise micro 5.32.92-150200.50.2fixed
Suseca-certificates-mozillalinux enterprise micro 5.42.92-150200.50.2fixed
Suseca-certificates-mozillalinux enterprise micro 5.52.92-150200.50.2fixed
Suseca-certificates-mozillalinux enterprise module for basesystem 15 sp72.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise module for development tools 15 sp72.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise high performance computing 15 sp4-espos2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise high performance computing 15 sp4-espos2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise high performance computing 15 sp4-ltss2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise high performance computing 15 sp4-ltss2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise high performance computing 15 sp5-espos2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise high performance computing 15 sp5-espos2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise high performance computing 15 sp5-ltss2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise high performance computing 15 sp5-ltss2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise server 15 sp4-ltss2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise server 15 sp4-ltss2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise server 15 sp5-ltss2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise server 15 sp5-ltss2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise server 15 sp6-ltss2.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise server 15 sp6-ltss2.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise server for sap applications 15 sp42.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise server for sap applications 15 sp42.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise server for sap applications 15 sp52.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise server for sap applications 15 sp52.92-150200.50.3fixed
Suseca-certificates-mozillalinux enterprise server for sap applications 15 sp62.92-150200.50.2fixed
Suseca-certificates-mozilla-prebuiltlinux enterprise server for sap applications 15 sp62.92-150200.50.3fixed
Suseopenssl-certslinux enterprise server 11 sp4 ltss extreme core2.92-0.7.39.1fixed
Opensuseca-certificates-mozillatumbleweed2.92-2.1fixed
Suseca-certificates-mozillalinux micro 6.12.92-slfo.1.1_1.1fixed
Suseca-certificates-mozillalinux micro 6.02.92-159998.1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suseca-certificates-mozillarpmlinux enterprise micro 5.32.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise micro 5.42.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise micro 5.52.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise module for basesystem 15 sp72.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise module for development tools 15 sp72.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise high performance computing 15 sp4-espos2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise high performance computing 15 sp4-espos2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise high performance computing 15 sp4-ltss2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise high performance computing 15 sp4-ltss2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise high performance computing 15 sp5-espos2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise high performance computing 15 sp5-espos2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise high performance computing 15 sp5-ltss2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise high performance computing 15 sp5-ltss2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise server 15 sp4-ltss2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise server 15 sp4-ltss2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise server 15 sp5-ltss2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise server 15 sp5-ltss2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise server 15 sp6-ltss2.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise server 15 sp6-ltss2.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise server for sap applications 15 sp42.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise server for sap applications 15 sp42.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise server for sap applications 15 sp52.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise server for sap applications 15 sp52.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozillarpmlinux enterprise server for sap applications 15 sp62.92-150200.50.2Not reportedSUSE-SU-2026:4847-1Not reported
Suseca-certificates-mozilla-prebuiltrpmlinux enterprise server for sap applications 15 sp62.92-150200.50.3Not reportedSUSE-SU-2026:4847-1Not reported
Suseopenssl-certsrpmlinux enterprise server 11 sp4 ltss extreme core2.92-0.7.39.1Not reportedSUSE-SU-2026:4820-1Not reported
Opensuseca-certificates-mozillarpmtumbleweed2.92-2.1Not reportedOPENSUSE-SU-2026:12233-1Not reported
Suseca-certificates-mozillarpmlinux micro 6.12.92-slfo.1.1_1.1Not reportedSUSE-SU-2026:24383-1Not reported
Suseca-certificates-mozillarpmlinux micro 6.02.92-159998.1.1Not reportedSUSE-SU-2026:24373-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]