TL;DR Sonatype's tests found that Java's blocked.certs rejected the listed certificate encodings but accepted re-encoded versions that still validated in the tested configurations. We reproduced the ...
Oracle has issued emergency Java updates that remove root certificates associated with a certificate authority key compromise, requiring development teams to check the runtimes their applications use.
This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may appear to be separate issues, they all stem from the same incident. Eight inte ...
Teku 26.10.3 and Besu 26.10.2 remove four compromised certificate roots from Docker images. Binary users must check Java ...
Hello everyone! This is Hatchobori-chan.From yesterday to today, various vulnerability reports have been flying in.GitLab, ...
Teku and Besu have updated their respective Docker images following the eMudhra incident, as the weak certificate key posed a ...