Skip to content
NewA calmer, faster ZeroHour
Advisorymedium

Ubuntu removes emSign and Comodo root CAs on older LTS

Original title: USN-8944-2: ca-certificates update

Ubuntu Security Notices ()1
Read at ubuntu.com
Part of a story covered by 3 sourcesUbuntu drops emSign and Comodo roots after compromised intermediatesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

USN-8944-2 drops both roots on Ubuntu 14.04, 16.04, 18.04, and 20.04 LTS after compromised emSign intermediates.

Ubuntu published USN-8944-2 so older LTS releases receive the ca-certificates changes from USN-8944-1. The update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" certificates. The emSign root is removed because intermediate CA certificates were compromised. Newer Ubuntu releases were already refreshed to the Mozilla 2.90 CA bundle.

Key facts
  • This notice covers Ubuntu 14.04, 16.04, 18.04, and 20.04 LTS.
  • USN-8944-1 already updated Ubuntu 22.04, 24.04, and 26.04 LTS.
  • Newer releases were refreshed to the Mozilla certificate bundle version 2.90.
Security assessment · AI, from the article

Impact: Trust in a root whose intermediate CAs were compromised

ProductAffected
Ubuntu ca-certificatesUbuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, and 20.04 LTS
What to do
  1. 1.Install the updated ca-certificates package on the listed Ubuntu LTS releases.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
ubuntuca-certificatescertificate-authorityemsigncomodo
Vendors
Ubuntu
Products
ca-certificates

From the original article

USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14. 04 LTS, Ubuntu 16.

Ubuntu Security Notices

ubuntu.com

Read the full article at Ubuntu Security Notices

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.