ELBA-2025-19952

ELBA-2025-19952 - ca-certificates bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2025-11-09

Description

[2025.2.80_v9.0.305-102]
- Remove /etc/pki/tls/certs/ca-certificates.crt symlink which was included by mistake

[2025.2.80_v9.0.305-101]
- Update to CKBI 2.80_v9.0.305 from NSS 3.114
- Adding:
- # Certificate 'TWCA CYBER Root CA'
- # Certificate 'TWCA Global Root CA G2'
- # Certificate 'SecureSign Root CA12'
- # Certificate 'SecureSign Root CA14'
- # Certificate 'SecureSign Root CA15'
- # Certificate 'D-TRUST BR Root CA 2 2023'
- # Certificate 'TrustAsia SMIME ECC Root CA'
- # Certificate 'TrustAsia SMIME RSA Root CA'
- # Certificate 'TrustAsia TLS ECC Root CA'
- # Certificate 'TrustAsia TLS RSA Root CA'
- # Certificate 'D-TRUST EV Root CA 2 2023'
- # Certificate 'SwissSign RSA SMIME Root CA 2022 - 1'
- # Certificate 'SwissSign RSA TLS Root CA 2022 - 1'
- # Certificate 'Sectigo Public Code Signing Root R46'
- # Certificate 'Sectigo Public Code Signing Root E46'

[2024.2.69_v8.0.303-102.5]
- Bring back openssl trusted format bundle as well (Resolves: RHEL-109484)
- Restored the following symlinks:
* /etc/pki/tls/cert.pem
* /etc/pki/tls/certs/ca-certificates.crt
* /etc/pki/tls/certs/ca-bundle.trust.crt
* /etc/pki/tls/certs/ca-bundle.crt
* /etc/ssl/cert.pem
* /etc/ssl/certs/ca-certificates.crt
* /etc/ssl/certs/ca-bundle.trust.crt
* /etc/ssl/certs/ca-bundle.crt
- add libffi

[2024.2.69_v8.0.303-102.4]
- Remove unused folder /etc/pki/ca-trust/extracted/openssl

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	ca-certificates-2025.2.80_v9.0.305-102.el10_0.src.rpm	dde5b1a96c4c14d8fa77a9e65c78607d0746fa365ca91ff60e56b7ac311cd6d9	-	ol10_aarch64_baseos_latest
	ca-certificates-2025.2.80_v9.0.305-102.el10_0.src.rpm	dde5b1a96c4c14d8fa77a9e65c78607d0746fa365ca91ff60e56b7ac311cd6d9	-	ol10_aarch64_u0_baseos_patch
	ca-certificates-2025.2.80_v9.0.305-102.el10_0.noarch.rpm	768f35fe7c555b5906eb67d8a5e97a37fffd1fc6babbbab8d903ce5e5d2d5e42	-	ol10_aarch64_baseos_latest
	ca-certificates-2025.2.80_v9.0.305-102.el10_0.noarch.rpm	768f35fe7c555b5906eb67d8a5e97a37fffd1fc6babbbab8d903ce5e5d2d5e42	-	ol10_aarch64_u0_baseos_patch
Oracle Linux 10 (x86_64)	ca-certificates-2025.2.80_v9.0.305-102.el10_0.src.rpm	dde5b1a96c4c14d8fa77a9e65c78607d0746fa365ca91ff60e56b7ac311cd6d9	-	ol10_x86_64_baseos_latest
	ca-certificates-2025.2.80_v9.0.305-102.el10_0.src.rpm	dde5b1a96c4c14d8fa77a9e65c78607d0746fa365ca91ff60e56b7ac311cd6d9	-	ol10_x86_64_u0_baseos_patch
	ca-certificates-2025.2.80_v9.0.305-102.el10_0.noarch.rpm	768f35fe7c555b5906eb67d8a5e97a37fffd1fc6babbbab8d903ce5e5d2d5e42	-	ol10_x86_64_baseos_latest
	ca-certificates-2025.2.80_v9.0.305-102.el10_0.noarch.rpm	768f35fe7c555b5906eb67d8a5e97a37fffd1fc6babbbab8d903ce5e5d2d5e42	-	ol10_x86_64_u0_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team