Skip to content
Ubuntu Removes Compromised CA Certificate in Security Update

Ubuntu Removes Compromised CA Certificate in Security Update

First seen 21 Oct 2026, 01:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 02:20 UTC
  • •Ubuntu has removed the compromised 'emSign ECC Root CA - G3' certificate.
  • •The ca-certificates package was updated across multiple Ubuntu LTS versions.
  • •Users should update their systems to reduce security exposure.

On October 20, 2026, Ubuntu released USN-8944-1, removing the compromised 'emSign ECC Root CA - G3' certificate from its ca-certificates package. This update affects Ubuntu 22.04 LTS, 24.04 LTS, and 26.04 LTS, which contained outdated CA certificates. The ca-certificates package has been refreshed to include certificates from the 2.90 version of the Mozilla certificate authority bundle. Users are advised to perform a standard system update to mitigate security exposure. Ubuntu Pro offers ten-year security coverage for over 25,000 packages, free for up to five machines. No specific CVEs were mentioned in the articles, and there are no indications of related to this update.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-20
Ubuntu releases USN-8944-1
Ubuntu issued a security update to remove the compromised CA certificate and refresh outdated certificates.
Ubuntu

More articles in this cluster (2)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2

Common questions

Which Ubuntu versions are affected?
The update affects Ubuntu 22.04 LTS, 24.04 LTS, and 26.04 LTS.
Is there any active exploitation of this issue?
No, there are no indications of active exploitation related to this compromised CA certificate.
How can I update my system?
Perform a standard system update to apply the latest ca-certificates package.