Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Canonical ca-certificates adds and updates trusted roots
published 1 year ago
Summary
The trusted certificate list used by Canonical’s ca-certificates package has been refreshed with newer versions of existing certificates and several new ones. This helps keep encrypted connections reliable and secure. Apply the latest package update to ensure your systems use the current trusted certificates.
What to do
- Update canonical ca-certificates to version 20250416ubuntu0.18.04.1+tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Ubuntu:18.04 | canonical | ca-certificates |
< 20250416ubuntu0.18.04.1+tuxcare.els1 Fix: upgrade to 20250416ubuntu0.18.04.1+tuxcare.els1
|
Original advisory text
Update of ca-certificates
* Update ca-certificates database to 20250416:
- mozilla\{certdata.h,nssckbi.h}: Update Mozilla certificate
authority bundle of the version 2.74.
- The following certificates were updated:
# Certificate "certSIGN ROOT CA"
# Certificate "ACCVRAIZ1"
# Certificate "Entrust Root Certification Authority - G4"
# Certificate "Security Communication ECC RootCA1"
# Certificate "BJCA Global Root CA1"
# Certificate "BJCA Global Root CA2"
- The following certificates were added:
# Certificate "TWCA CYBER Root CA"
# Certificate "SecureSign Root CA12"
# Certificate "SecureSign Root CA14"
# Certificate "SecureSign Root CA15"
# Certificate "D-TRUST BR Root CA 2 2023"
# Certificate "D-TRUST EV Root CA 2 2023"
- mozilla\{certdata.h,nssckbi.h}: Update Mozilla certificate
authority bundle of the version 2.74.
- The following certificates were updated:
# Certificate "certSIGN ROOT CA"
# Certificate "ACCVRAIZ1"
# Certificate "Entrust Root Certification Authority - G4"
# Certificate "Security Communication ECC RootCA1"
# Certificate "BJCA Global Root CA1"
# Certificate "BJCA Global Root CA2"
- The following certificates were added:
# Certificate "TWCA CYBER Root CA"
# Certificate "SecureSign Root CA12"
# Certificate "SecureSign Root CA14"
# Certificate "SecureSign Root CA15"
# Certificate "D-TRUST BR Root CA 2 2023"
# Certificate "D-TRUST EV Root CA 2 2023"
References
Timeline
Published9 Jul 2025
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2025-1752082142 · OSV
Track software like this
Free during beta