Home / mailings

PDF

[USN-8944-1] ca-certificates update

Posted on 20 October 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8944-1
October 20, 2026

ca-certificates update
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

The CA certificates in the ca-certificates package were updated.

Software Description:
- ca-certificates: Common CA certificates

Details:

This update removes the "emSign ECC Root CA - G3" CA certificate due to
intermediate CA certificates being compromised.

In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,
the ca-certificates package contained outdated CA certificates. This update
refreshes the included certificates to those contained in the 2.90 version
of the Mozilla certificate authority bundle.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
ca-certificates 20260816ubuntu0.26.10.1

Ubuntu 26.04 LTS
ca-certificates 20260816ubuntu0.26.04.1

Ubuntu 24.04 LTS
ca-certificates 20260816ubuntu0.24.04.1

Ubuntu 22.04 LTS
ca-certificates 20260816ubuntu0.22.04.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8944-1
https://bugs.launchpad.net/bugs/2171507

Package Information:
https://launchpad.net/ubuntu/+source/ca-certificates/20260816ubuntu0.26.10.1
https://launchpad.net/ubuntu/+source/ca-certificates/20260816ubuntu0.26.04.1
https://launchpad.net/ubuntu/+source/ca-certificates/20260816ubuntu0.24.04.1
https://launchpad.net/ubuntu/+source/ca-certificates/20260816ubuntu0.22.04.1

--===============1757926633589338710==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP