Summary
[2026.2.92_v9.0.319-90.3]
- Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch
[2026.2.92_v9.0.319-90.2]
- Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates
[2026.2.92_v9.0.319-90.1]
- Removing: AAA Certificate Services root CA
- Removing: emSign ECC Root CA - G3 from Microsoft Code Signing certificates
[2026.2.92_v9.0.319-90.0]
- Update to CKBI 2.92_v9.0.319 from NSS 3.131.1
Removing:
- emSign Root CA - C1
Adding:
- Actalis Code Signing ECC Root CA 2025
- Actalis Code Signing RSA Root CA 2025
- emSign Root CS CA - G2
- emSign Root CS CA - G3
- IdenTrust Commercial Root Code Signing RSA CA 2
- e-Szigno CodeSigning Root CA 2024
[2026.2.90_v9.0.316-90.0]
- Update to CKBI 2.90_v9.0.316 from NSS 3.126
Removing:
- XRamp Global CA Root
- ePKI Root Certification Authority
- certSIGN ROOT CA
- Explicitly Distrust DigiNotar Root CA
- CommScope Public Trust ECC Root-01
- CommScope Public Trust ECC Root-02
- CommScope Public Trust RSA Root-01
- CommScope Public Trust RSA Root-02
- FIRMAPROFESIONAL CA ROOT-A WEB
- SecureSign Root CA12
Adding:
- OISTE Client Root ECC G1
- OISTE Client Root RSA G1
- OISTE Server Root ECC G1
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023
- SecureSign Root CA16
- SECOM TLS RSA Root CA 2024
- SECOM TLS ECC Root CA 2024
- SECOM SMIME RSA Root CA 2024
- Telia EC Email Root CA v3
- Telia EC TLS Root CA v3
- Telia RSA Email Root CA v3
- Telia RSA TLS Root CA v3
- certSIGN
- Chunghwa Telecom Co., Ltd.
- XRamp Global Certification Authority
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | ca-certificates | 0:2026.2.92_v9.0.319-90.3.el9_8 |
Vulnerabilities 1
-
Medium 6.8
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certif…