ELSA-2026-500496 - ca-certificates security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-23 |
Description
[2025.2.80_v9.0.304-71.0.2]
- eMudhra: add 'emSign ECC Root CA - G3' and 'Comodo AAA Services root' to blocklist
[2025.2.80_v9.0.304-71.0.1]
- Resolve ELBA-2025-22492 [Orabug: 38712242]
- Update to CKBI 2.80_v9.0.304 from NSS 3.114
- Adding:
- # Certificate 'TWCA CYBER Root CA'
- # Certificate 'TWCA Global Root CA G2'
- # Certificate 'SecureSign Root CA12'
- # Certificate 'SecureSign Root CA14'
- # Certificate 'SecureSign Root CA15'
- # Certificate 'D-TRUST BR Root CA 2 2023'
- # Certificate 'TrustAsia SMIME ECC Root CA'
- # Certificate 'TrustAsia SMIME RSA Root CA'
- # Certificate 'TrustAsia TLS ECC Root CA'
- # Certificate 'TrustAsia TLS RSA Root CA'
- # Certificate 'D-TRUST EV Root CA 2 2023'
- # Certificate 'SwissSign RSA SMIME Root CA 2022 - 1'
- # Certificate 'SwissSign RSA TLS Root CA 2022 - 1'
- # Certificate 'Sectigo Public Code Signing Root R46'
- # Certificate 'Sectigo Public Code Signing Root E46'
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 7 (x86_64) | ca-certificates-2025.2.80_v9.0.304-71.0.2.el7_9.src.rpm | c46a21e2dd34e83a5ada5539d7c16ad043461da12813b305c71feb7ad56dc947 | - | ol7_x86_64_latest_ELS |
| ca-certificates-2025.2.80_v9.0.304-71.0.2.el7_9.noarch.rpm | 755dc82bec9894ceabbc2f477f3cdaff496fd0f1e2acdb1f61182d2f07136c9c | - | ol7_x86_64_latest_ELS |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team