USN-8944-1
ca-certificates update
This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised.
In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.
What each source reports
OSV No score
ca-certificates update
This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised.
In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.
- Record
USN-8944-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:22.04:LTS |
before 20260816ubuntu0.22.04.1, plus listed versions 20210119ubuntu12021101620211016ubuntu0.22.04.120230311ubuntu0.22.04.120240203~22.04.120260601~22.04.1 |
20260816ubuntu0.22.04.1 |
ca-certificatesUbuntu:24.04:LTS |
before 20260816ubuntu0.24.04.1, plus listed versions 20230311ubuntu12024020320260601~24.04.1 |
20260816ubuntu0.24.04.1 |
ca-certificatesUbuntu:26.10 |
before 20260816ubuntu0.26.10.1, plus listed versions 202602232026060120260816 |
20260816ubuntu0.26.10.1 |
ca-certificatesUbuntu:26.04:LTS |
before 20260816ubuntu0.26.04.1, plus listed versions 2025041920250419build12026022320260601~26.04.1 |
20260816ubuntu0.26.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8944-1 is a vulnerability with no CVSS score yet in ca-certificates, published October 20, 2026. No source lists public exploit code. Fixed in ca-certificates 20260816ubuntu0.22.04.1.