Cyber ·
USN-8947-1: Ubuntu updates NSS and removes two root certificates
Ubuntu Security notice dated 21 October 2026: the NSS package update removes the root CA certificates emSign ECC Root CA - G3 and Comodo AAA Services root after intermediate certificates from those authorities were compromised.
Radar records notice USN-8947-1 from the Ubuntu Security feed, dated 21 October 2026. According to the available text, the NSS update removes two root certificate authority certificates because related intermediate certificates were compromised. The removed certificates are emSign ECC Root CA - G3 and Comodo AAA Services root. The text provided is an automatic translation of the original content, so technical terms should be checked against the official notice. For operations teams, the relevant point is that the system trust store will no longer accept chains that depend on these roots after the update. TLS connections that previously passed through these roots may fail until the package is updated. To verify, consult identifier USN-8947-1 on the official Ubuntu Security site, confirm whether your system uses the NSS version named in the notice, and test outbound connections after updating. This item does not describe a new Rota Nacional capability and does not involve personal data.