Linuxsecurity Fedora 44 Patches Critical CA Compromise Vulnerabilities
Article Content
- •Critical vulnerabilities identified in Fedora 44 related to CA compromise.
- •Updates include rust-webpki 0.103.16 and webpki-roots 1.0.10.
- •Users must apply patches immediately to secure their systems.
Fedora 44 has released updates to address critical vulnerabilities related to the eMudhra Intermediate CA compromise, identified as CVE-2026-111943. The updates include the rust-webpki crate version 0.103.16 and the webpki-roots and webpki-root-certs crates updated to version 1.0.10. These updates are crucial for maintaining secure connections in applications using Mozilla's trusted certificate authorities. The vulnerabilities could potentially allow for unauthorized access or code execution in affected systems. Users are urged to apply the updates immediately to mitigate risks. The updates were made available on October 21, 2026, and are tracked in the Fedora update notification FEDORA-2026-8eeffa4c43. The issues were reported under security advisories RUSTSEC-2026-0382, RUSTSEC-2026-0381, and RUSTSEC-2026-0383.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track CVE-2026-111943 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What specific vulnerabilities are addressed?
How urgent is it to apply these updates?
What systems are affected by these vulnerabilities?
Continue Reading
eMudhra CA Key Compromise: Weak Keys Lead to Browser Blocks The private keys of eight intermediate certificates issued by Indian CA eMudhra have been compromised due to weak key generation, allowing potential forgery of trusted HTTPS certificates. A researcher discovered the flaw on October 17, 2026, revealing that the keys were generated using predictable integers, making…