Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

certificate-transparency-trillian-ctserver may expose sensitive data

published 3 months ago
Summary

The certificate-transparency-trillian-ctserver component can be tricked into revealing information it should keep private, and it may also allow unauthorized actions. This could let attackers see or alter log data used for verifying digital certificates. Update to the latest version as soon as possible to apply the security fixes.

What to do
  • Update cleanstart certificate-transparency-trillian-ctserver to version 1.3.2-r1.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart certificate-transparency-trillian-ctserver < 1.3.2-r1
Fix: upgrade to 1.3.2-r1
Original advisory text
Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r1
Package certificate-transparency-trillian-ctserver version 1.3.2-r1 fixes 9 vulnerabilities: CVE-2026-25679, CVE-2025-68121, ghsa-p77j-4mvh-x3m3, CVE-2026-27142, CVE-2025-61732...
Timeline
Published30 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
Track software like this
Free during beta