Skip to content
OpenAdvisories
Unscored USN-8944-1 0 CVEs

ca-certificates update

Published Oct 20, 2026 · Updated Oct 20, 2026

Summary

This update removes the "emSign ECC Root CA - G3" CA certificate due to
intermediate CA certificates being compromised.

In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,
the ca-certificates package contained outdated CA certificates. This update
refreshes the included certificates to those contained in the 2.90 version
of the Mozilla certificate authority bundle.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS ca-certificates 20260816ubuntu0.22.04.1
Ubuntu · 24.04 LTS 24.04:LTS ca-certificates 20260816ubuntu0.24.04.1
Ubuntu · 26.04 LTS 26.04:LTS ca-certificates 20260816ubuntu0.26.04.1
Ubuntu · 26.10 ca-certificates 20260816ubuntu0.26.10.1

References

  • report
    https://bugs.launchpad.net/bugs/2171507