ELSA-2026-500496

ELSA-2026-500496 - ca-certificates security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-23

Description


[2025.2.80_v9.0.304-71.0.2]
- eMudhra: add 'emSign ECC Root CA - G3' and 'Comodo AAA Services root' to blocklist

[2025.2.80_v9.0.304-71.0.1]
- Resolve ELBA-2025-22492 [Orabug: 38712242]
- Update to CKBI 2.80_v9.0.304 from NSS 3.114
- Adding:
- # Certificate 'TWCA CYBER Root CA'
- # Certificate 'TWCA Global Root CA G2'
- # Certificate 'SecureSign Root CA12'
- # Certificate 'SecureSign Root CA14'
- # Certificate 'SecureSign Root CA15'
- # Certificate 'D-TRUST BR Root CA 2 2023'
- # Certificate 'TrustAsia SMIME ECC Root CA'
- # Certificate 'TrustAsia SMIME RSA Root CA'
- # Certificate 'TrustAsia TLS ECC Root CA'
- # Certificate 'TrustAsia TLS RSA Root CA'
- # Certificate 'D-TRUST EV Root CA 2 2023'
- # Certificate 'SwissSign RSA SMIME Root CA 2022 - 1'
- # Certificate 'SwissSign RSA TLS Root CA 2022 - 1'
- # Certificate 'Sectigo Public Code Signing Root R46'
- # Certificate 'Sectigo Public Code Signing Root E46'


Related CVEs


CVE-2026-111943
CVE-2026-113470

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (x86_64) ca-certificates-2025.2.80_v9.0.304-71.0.2.el7_9.src.rpmc46a21e2dd34e83a5ada5539d7c16ad043461da12813b305c71feb7ad56dc947-ol7_x86_64_latest_ELS
ca-certificates-2025.2.80_v9.0.304-71.0.2.el7_9.noarch.rpm755dc82bec9894ceabbc2f477f3cdaff496fd0f1e2acdb1f61182d2f07136c9c-ol7_x86_64_latest_ELS



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete