Ubuntu NSS update removes two root CAs after intermediate compromise
Original title: USN-8947-1: NSS update
The notice drops emSign ECC Root CA - G3 and the Comodo AAA Services root from NSS.
Ubuntu security notice USN-8947-1 updates NSS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" certificates. The stated reason is that intermediate CA certificates were compromised. The short notice does not name the intermediates, describe the compromise, or list package versions.
Unconfirmed: The notice does not identify the compromised intermediates or how they were compromised.
- Roots removed are emSign ECC Root CA - G3 and Comodo AAA Services root.
- Ubuntu attributes the removal to compromised intermediate CA certificates.
- No CVE, affected package version, or exploitation detail is in the notice.
Impact: Compromised intermediate CAs removed from the NSS trust store
| Product | Affected |
|---|---|
| Ubuntu NSS | — |
- 1.Apply Ubuntu security notice USN-8947-1 for NSS.
From the original article
This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.