# Ubuntu updates NSS to remove compromised CA certificates

> **Key takeaway:** Ubuntu has removed the emSign ECC Root CA - G3 and Comodo AAA Services root certificates from the NSS package due to compromised intermediate certificates.

**Published:** 2026-10-21T17:40:27+00:00 
**Source:** Ubuntu Security & Release Notices 
**Category:** distro-news 
**Canonical URL:** https://fosswire.org/news/ubuntu-updates-nss-to-remove-compromised-ca-certificates.html 

## Summary
Ubuntu has released a security update for the Network Security Service (NSS) library across multiple releases. The update removes two specific root CA certificates because their associated intermediate certificates have been compromised. Users should perform a standard system update to apply the fix.

## Details of the NSS security update
- Removed CA certificate: **emSign ECC Root CA - G3**
- Removed CA certificate: **Comodo AAA Services root**
- Reason: Compromised intermediate CA certificates
- Affected package: **libnss3**