Cyber ·
Ubuntu updates ca-certificates and removes CA certificates tied to the eMudhra incident
Ubuntu advisory USN-8944-2 removes two certificate authority certificates and refreshes the ca-certificates package on LTS releases, aligned with Mozilla bundle version 2.90.
Advisory USN-8944-2, published by Ubuntu Security on 20 October 2026, follows USN-8944-1. The update covers Ubuntu 14.04, 16.04, 18.04 and 20.04 LTS, where it removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" certificates. According to the original advisory, the removal of the first is due to compromised intermediate certificates related to the eMudhra incident. On Ubuntu 22.04, 24.04 and 26.04 LTS, the package contained outdated certificate authority certificates; the update renews them to match the contents of Mozilla certificate bundle version 2.90.
For Rota Nacional users, the topic matters because trust in TLS connections depends on the operating system certificate store of whatever host makes the API calls. This text is an automatic translation of the feed; check the original Ubuntu advisory for identifiers and the full list of packages.