[El-errata] ELSA-2026-88455 Critical: Oracle Linux 10 ca-certificates security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-88455

http://linux.oracle.com/errata/ELSA-2026-88455.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
ca-certificates-2026.2.92_v9.0.319-100.3.el10_2.noarch.rpm

aarch64:
ca-certificates-2026.2.92_v9.0.319-100.3.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/ca-certificates-2026.2.92_v9.0.319-100.3.el10_2.src.rpm

Related CVEs:

CVE-2026-114406




Description of changes:

[2026.2.92_v9.0.319-100.3]
- Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch

[2026.2.92_v9.0.319-100.2]
- Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates

[2026.2.92_v9.0.319-100.1]
- Removing: AAA Certificate Services root CA
- Removing: emSign ECC Root CA - G3 from Microsoft Code Signing certificates

[2026.2.92_v9.0.319-100.0]
- Update to CKBI 2.92_v9.0.319 from NSS 3.131.1
  Removing:
  - emSign Root CA - C1

  Adding:
  - Actalis Code Signing ECC Root CA 2025
  - Actalis Code Signing RSA Root CA 2025
  - emSign Root CS CA - G2
  - emSign Root CS CA - G3
  - IdenTrust Commercial Root Code Signing RSA CA 2
  - e-Szigno CodeSigning Root CA 2024

[2026.2.90_v9.0.316-100.0]
- Update to CKBI 2.90_v9.0.316 from NSS 3.126
  Removing:
  - ePKI Root Certification Authority

  Adding:
  - SECOM TLS RSA Root CA 2024
  - SECOM TLS ECC Root CA 2024
  - SECOM SMIME RSA Root CA 2024
  - Telia EC Email Root CA v3
  - Telia EC TLS Root CA v3
  - Telia RSA Email Root CA v3
  - Telia RSA TLS Root CA v3
  - Chunghwa Telecom Co., Ltd.

[2026.2.88_v9.0.316-100.0]
- Update to CKBI 2.88_v9.0.316 from NSS 3.125
-    Removing:
-     # Certificate "XRamp Global CA Root"
-     # Certificate "certSIGN ROOT CA"
-     # Certificate "Explicitly Distrust DigiNotar Root CA"
-     # Certificate "CommScope Public Trust ECC Root-01"
-     # Certificate "CommScope Public Trust ECC Root-02"
-     # Certificate "CommScope Public Trust RSA Root-01"
-     # Certificate "CommScope Public Trust RSA Root-02"
-     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
-     # Certificate "SecureSign Root CA12"
-    Adding:
-     # Certificate "OISTE Client Root ECC G1"
-     # Certificate "OISTE Client Root RSA G1"
-     # Certificate "OISTE Server Root ECC G1"
-     # Certificate "OISTE Server Root RSA G1"
-     # Certificate "e-Szigno TLS Root CA 2023"
-     # Certificate "SecureSign Root CA16"
-     # Certificate "certSIGN"
-     # Certificate "XRamp Global Certification Authority"