ELSA-2026-88550

ELSA-2026-88550 - ca-certificates security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2026-10-23

Description

[2026.2.92_v9.0.319-81.3]
- Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch

[2026.2.92_v9.0.319-81.2]
- Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates

[2026.2.92_v9.0.319-81]
- Update to CKBI 2.92_v9.0.319 from NSS 3.131.1
Removing:
- emSign Root CA - C1

Adding:
- Actalis Code Signing ECC Root CA 2025
- Actalis Code Signing RSA Root CA 2025
- emSign Root CS CA - G2
- emSign Root CS CA - G3
- IdenTrust Commercial Root Code Signing RSA CA 2
- e-Szigno CodeSigning Root CA 2024

[2026.2.90_v9.0.316-80.0]
- Update to CKBI 2.90_v9.0.316 from NSS 3.126
Removing:
- XRamp Global CA Root
- ePKI Root Certification Authority
- certSIGN ROOT CA
- Explicitly Distrust DigiNotar Root CA
- CommScope Public Trust ECC Root-01
- CommScope Public Trust ECC Root-02
- CommScope Public Trust RSA Root-01
- CommScope Public Trust RSA Root-02
- FIRMAPROFESIONAL CA ROOT-A WEB
- SecureSign Root CA12

Adding:
- OISTE Client Root ECC G1
- OISTE Client Root RSA G1
- OISTE Server Root ECC G1
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023
- SecureSign Root CA16
- SECOM TLS RSA Root CA 2024
- SECOM TLS ECC Root CA 2024
- SECOM SMIME RSA Root CA 2024
- Telia EC Email Root CA v3
- Telia EC TLS Root CA v3
- Telia RSA Email Root CA v3
- Telia RSA TLS Root CA v3
- certSIGN
- Chunghwa Telecom Co., Ltd.
- XRamp Global Certification Authority

Related CVEs

CVE-2026-114406

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.src.rpm	383a43adad37a3417d26a70bffe15287c5fcc5c0eab7eb08ebdc6321a7592a4e	-	ol8_aarch64_baseos_latest
	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.src.rpm	383a43adad37a3417d26a70bffe15287c5fcc5c0eab7eb08ebdc6321a7592a4e	-	ol8_aarch64_u10_baseos_patch
	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.noarch.rpm	f00fdbf10626c253f3f5744b73bcf09d6eb0393d6b4d5674082902fdf0b50510	-	ol8_aarch64_baseos_latest
	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.noarch.rpm	f00fdbf10626c253f3f5744b73bcf09d6eb0393d6b4d5674082902fdf0b50510	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.src.rpm	383a43adad37a3417d26a70bffe15287c5fcc5c0eab7eb08ebdc6321a7592a4e	-	ol8_x86_64_baseos_latest
	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.src.rpm	383a43adad37a3417d26a70bffe15287c5fcc5c0eab7eb08ebdc6321a7592a4e	-	ol8_x86_64_u10_baseos_patch
	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.noarch.rpm	f00fdbf10626c253f3f5744b73bcf09d6eb0393d6b4d5674082902fdf0b50510	-	ol8_x86_64_baseos_latest
	ca-certificates-2026.2.92_v9.0.319-81.3.el8_10.noarch.rpm	f00fdbf10626c253f3f5744b73bcf09d6eb0393d6b4d5674082902fdf0b50510	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team