[El-errata] ELBA-2025-19952 Oracle Linux 10 ca-certificates bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2025-19952

http://linux.oracle.com/errata/ELBA-2025-19952.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
ca-certificates-2025.2.80_v9.0.305-102.el10_0.noarch.rpm

aarch64:
ca-certificates-2025.2.80_v9.0.305-102.el10_0.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/ca-certificates-2025.2.80_v9.0.305-102.el10_0.src.rpm



Description of changes:

[2025.2.80_v9.0.305-102]
- Remove /etc/pki/tls/certs/ca-certificates.crt symlink which was included by mistake

[2025.2.80_v9.0.305-101]
- Update to CKBI 2.80_v9.0.305 from NSS 3.114
-    Adding:
-     # Certificate "TWCA CYBER Root CA"
-     # Certificate "TWCA Global Root CA G2"
-     # Certificate "SecureSign Root CA12"
-     # Certificate "SecureSign Root CA14"
-     # Certificate "SecureSign Root CA15"
-     # Certificate "D-TRUST BR Root CA 2 2023"
-     # Certificate "TrustAsia SMIME ECC Root CA"
-     # Certificate "TrustAsia SMIME RSA Root CA"
-     # Certificate "TrustAsia TLS ECC Root CA"
-     # Certificate "TrustAsia TLS RSA Root CA"
-     # Certificate "D-TRUST EV Root CA 2 2023"
-     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
-     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
-     # Certificate "Sectigo Public Code Signing Root R46"
-     # Certificate "Sectigo Public Code Signing Root E46"

[2024.2.69_v8.0.303-102.5]
- Bring back openssl trusted format bundle as well (Resolves: RHEL-109484)
- Restored the following symlinks:
	* /etc/pki/tls/cert.pem
	* /etc/pki/tls/certs/ca-certificates.crt
	* /etc/pki/tls/certs/ca-bundle.trust.crt
	* /etc/pki/tls/certs/ca-bundle.crt
	* /etc/ssl/cert.pem
	* /etc/ssl/certs/ca-certificates.crt
	* /etc/ssl/certs/ca-bundle.trust.crt
	* /etc/ssl/certs/ca-bundle.crt
- add libffi

[2024.2.69_v8.0.303-102.4]
- Remove unused folder /etc/pki/ca-trust/extracted/openssl