Skip to content
OpenAdvisories
Unscored USN-8944-2 0 CVEs

ca-certificates update

Published Oct 20, 2026 · Updated Oct 21, 2026

Summary

USN-8944-1 updated ca-certificates. This update provides the corresponding
changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA
Services root" CA certificates.

Original advisory details:

This update removes the "emSign ECC Root CA - G3" CA certificate due to
intermediate CA certificates being compromised.

In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,
the ca-certificates package contained outdated CA certificates. This
update refreshes the included certificates to those contained in the 2.90
version of the Mozilla certificate authority bundle.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS ca-certificates 20230311~14.04.1~esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS ca-certificates 202402031~16.04.1~esm3
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS ca-certificates 202402031ubuntu0.18.04.1+esm3
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS ca-certificates 20240203~20.04.1ubuntu0.1~esm2

References

  • report
    https://bugs.launchpad.net/bugs/2171507