ca-certificates: Compromised Intermediate Certificate Authority

ca-certificates: Compromised Intermediate Certificate Authority A vulnerability has been discovered in ca-certificates where an intermediate Certificate Authority has been compromised. ca-certificates 2026-10-21 2026-10-21 984601 remote 20260816.3.125 20260816.3.125

For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild.

A vulnerability has been discovered in ca-certificates. Please review the CVE identifier referenced below for details.

Man-in-the-middle (MITM) attacks are possible using the compromised authority key.

There is no known workaround at this time.

All ca-certificates users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=app-misc/ca-certificates-20260816.3.125"

CVE-2026-111943 sam sam