Thu, Oct 22 Vulnerabilities and patches
Java’s trust in eMudhra’s compromised certificate authorities now has a fix
OpenJDK says , which Oracle rates 9.1, concerns the eight intermediates, and the incident site lists patched Node.js releases too.
All tags
Topic2 items
Certificates
Every item in the brief tagged Certificates, newest first.
October 2026
2 itemsItem 3 in the brief for Thu, Oct 22
Wed, Oct 21 Vulnerabilities and patches
Certificate authority eMudhra’s weak keys let anyone forge trusted certificates
Chrome, Firefox, Apple and Microsoft block certificates from these keys, but software that doesn’t get revocation updates accepts them until its trust store is updated.
Mozilla Security Blog, source for item 3 on Wed, Oct 21Mozilla dev-security-policy forum, source for item 3 on Wed, Oct 21Mozilla Bugzilla incident report, source for item 3 on Wed, Oct 21eMudhra intermediate CA compromise site, source for item 3 on Wed, Oct 21Cloudflare, source for item 3 on Wed, Oct 21Go announcement, source for item 3 on Wed, Oct 21OpenJDK Vulnerability Group, source for item 3 on Wed, Oct 21Oracle Security Alert, source for item 3 on Wed, Oct 21Node.js, source for item 3 on Wed, Oct 21