{"id":"USN-8944-1","summary":"ca-certificates update","details":"This update removes the \"emSign ECC Root CA - G3\" CA certificate due to\nintermediate CA certificates being compromised.\n\nIn addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,\nthe ca-certificates package contained outdated CA certificates. This update\nrefreshes the included certificates to those contained in the 2.90 version\nof the Mozilla certificate authority bundle.","modified":"2026-10-20T22:45:16.295288409Z","published":"2026-10-20T15:52:06Z","references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8944-1"},{"type":"REPORT","url":"https://bugs.launchpad.net/bugs/2171507"}],"affected":[{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.22.04.1"}]}],"versions":["20210119ubuntu1","20211016","20211016ubuntu0.22.04.1","20230311ubuntu0.22.04.1","20240203~22.04.1","20260601~22.04.1"],"ecosystem_specific":{"binaries":[{"binary_version":"20260816ubuntu0.22.04.1","binary_name":"ca-certificates"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:22.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.24.04.1"}]}],"versions":["20230311ubuntu1","20240203","20260601~24.04.1"],"ecosystem_specific":{"binaries":[{"binary_version":"20260816ubuntu0.24.04.1","binary_name":"ca-certificates"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json","cves_map":{"cves":[],"ecosystem":"Ubuntu:24.04:LTS"}}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.10.1"}]}],"versions":["20260223","20260601","20260816"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"ca-certificates","binary_version":"20260816ubuntu0.26.10.1"}]},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:26.10"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.04.1"}]}],"versions":["20250419","20250419build1","20260223","20260601~26.04.1"],"ecosystem_specific":{"binaries":[{"binary_version":"20260816ubuntu0.26.04.1","binary_name":"ca-certificates"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:26.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"}}],"schema_version":"1.9.0"}