{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-enterprise-linux-9-4-update-services-for-sap-solutions/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-enterprise-linux-9-4-update-services-for-sap-solutions/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 10 (ca-certificates 2026.2.92_v9.0.319-100.3.el10_2)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 8 (ca-certificates 2026.2.92_v9.0.319-81.3.el8_10)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 9 (ca-certificates 2026.2.92_v9.0.319-90.3.el9_8)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (ca-certificates-mozilla 2.92-2.1)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-2.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 10 (ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 8 (ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 9 (ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-development-tools-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Development Tools 15 SP7 (ca-certificates-mozilla-prebuilt 2.92-150200.50.3)",
   "content_text": "Fixed versions: ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-11-sp4-ltss-extreme-core",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (openssl-certs 2.92-0.7.39.1)",
   "content_text": "Fixed versions: openssl-certs 2.92-0.7.39.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  }
 ]
}