{"id":"USN-8944-1","aliases":[],"status":"published","title":"ca-certificates update","description":"This update removes the \"emSign ECC Root CA - G3\" CA certificate due to\nintermediate CA certificates being compromised.\n\nIn addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,\nthe ca-certificates package contained outdated CA certificates. This update\nrefreshes the included certificates to those contained in the 2.90 version\nof the Mozilla certificate authority bundle.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-20T15:52:06Z","modified":"2026-10-20T22:45:16Z","fixes":[{"ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","fixed_in":["20260816ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates","fixed_in":["20260816ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"ca-certificates","fixed_in":["20260816ubuntu0.26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates","fixed_in":["20260816ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.22.04.1"}]}],"versions":["20210119ubuntu1","20211016","20211016ubuntu0.22.04.1","20230311ubuntu0.22.04.1","20240203~22.04.1","20260601~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.24.04.1"}]}],"versions":["20230311ubuntu1","20240203","20260601~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.10.1"}]}],"versions":["20260223","20260601","20260816"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.04.1"}]}],"versions":["20250419","20250419build1","20260223","20260601~26.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-8944-1","tags":["advisory"]},{"url":"https://bugs.launchpad.net/bugs/2171507","tags":["report"]}],"sources":{"osv":[{"id":"USN-8944-1","title":"ca-certificates update","description":"This update removes the \"emSign ECC Root CA - G3\" CA certificate due to\nintermediate CA certificates being compromised.\n\nIn addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,\nthe ca-certificates package contained outdated CA certificates. This update\nrefreshes the included certificates to those contained in the 2.90 version\nof the Mozilla certificate authority bundle.","status":"published","published":"2026-10-20T15:52:06Z","modified":"2026-10-20T22:45:16.295288409Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}