Updated perl-Mozilla-CA package fixes a security vulnerability
Publication date: 23 Oct 2026Modification date: 23 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-113812
Description
Mozilla::CA versions before 20261020 for Perl provide a CA certificate
bundle containing a root linked to compromised intermediates.
(CVE-2026-113812)
References
- https://bugs.mageia.org/show_bug.cgi?id=36555
- https://www.openwall.com/lists/oss-security/2026/10/20/36
- https://www.openwall.com/lists/oss-security/2026/10/20/1
- https://metacpan.org/release/LWP/Mozilla-CA-20261020/changes
- https://emudhra.we-have-a-problem.com/
- https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
- https://www.cve.org/CVERecord?id=CVE-2026-113812
SRPMS
10/core
- perl-Mozilla-CA-20261020.0.0-2.mga10