p PatchFirst

USN-8944-1

USN-8944-1 · ca-certificates update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised. In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • ca-certificates Ubuntu:22.04:LTS

    Versions
    • 20210119ubuntu1
    • 20211016
    • 20211016ubuntu0.22.04.1
    • 20230311ubuntu0.22.04.1
    • 20240203~22.04.1
    • 20260601~22.04.1
    Affected ranges
    • ECOSYSTEM: < 20260816ubuntu0.22.04.1

    Update to 20260816ubuntu0.22.04.1

  • ca-certificates Ubuntu:24.04:LTS

    Versions
    • 20230311ubuntu1
    • 20240203
    • 20260601~24.04.1
    Affected ranges
    • ECOSYSTEM: < 20260816ubuntu0.24.04.1

    Update to 20260816ubuntu0.24.04.1

  • ca-certificates Ubuntu:26.10

    Versions
    • 20260223
    • 20260601
    • 20260816
    Affected ranges
    • ECOSYSTEM: < 20260816ubuntu0.26.10.1

    Update to 20260816ubuntu0.26.10.1

  • ca-certificates Ubuntu:26.04:LTS

    Versions
    • 20250419
    • 20250419build1
    • 20260223
    • 20260601~26.04.1
    Affected ranges
    • ECOSYSTEM: < 20260816ubuntu0.26.04.1

    Update to 20260816ubuntu0.26.04.1

Original sources

Check your server →