QSN-8944-1: ca-certificates update
2026-10-20

Summary:
The CA certificates in the ca-certificates package were updated.

Details:
This update removes the "emSign ECC Root CA - G3" CA certificate due to
intermediate CA certificates being compromised.

In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS,
the ca-certificates package contained outdated CA certificates. This update
refreshes the included certificates to those contained in the 2.90 version
of the Mozilla certificate authority bundle.

Affected QuantaStor releases:
  6.9.1.001 jammy: ca-certificates 20260816ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.9.0.464 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.6.015 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.5.018 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.4.038 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.3.018 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.2.002 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.1.007 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)
  6.8.0.205 jammy: ca-certificates 20230311ubuntu0.22.04.1 (fixed in 20260816ubuntu0.22.04.1)

CVEs: 

References:
  https://ubuntu.com/security/notices/USN-8944-1
  https://bugs.launchpad.net/bugs/2171507