Operating systemsFreeBSD Project

FreeBSD updates its trusted certificate store: check caroot fixes on supported systems

FreeBSD issues a caroot security advisory, updating its system trust store following the eMudhra intermediate certificate incident. It lists all supported versions as affected; the fix marks the relevant root certificates as untrusted.

Anti-Ransomware · Compiled with SI agent assistanceOfficial security advisory date:Checked 2026.10.26
Original scenario illustration of an administrator checking a FreeBSD server's trusted certificate store and remediation records
Illustration · Source ↗ · About this image ↗

Source Facts

FreeBSD published FreeBSD-SA-26:73.caroot on 21 October, updating root certificate data used by OpenSSL applications and libraries. It says the advisory applies to all FreeBSD versions supported at that time and lists when each branch received its fix.

The advisory says the relevant intermediate certificate has been revoked, but OpenSSL does not check certificate revocation status by default. The corrected bundle marks emSign ECC Root CA - G3 as untrusted and incorporates other root certificate additions and removals from NSS 3.131.1.

Next Steps for Businesses / Editorial Observations

Certificate trust data is a system component that needs maintenance too. Update it through system and equipment vendor procedures rather than addressing browsers alone.

Next steps you can take

  • Identify FreeBSD hosts and derivative appliances, then check caroot remediation status using the relevant vendor's guidance.
  • After updating, test important TLS connections, confirm which new trust store the service uses and record incompatible connections for follow-up.

Original sources

FreeBSD-SA-26:73.caroot — TLS certificate store update due to eMudhra compromise

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of modular container equipment and a tray with a defined boundaryIllustrationSecurity updates · 2026.10.26

Amazon Linux updates its Docker security advisory: check container hosts and archive handling

Amazon LinuxIllustration of a female bakery owner checking online orders and receiptsIllustrationVulnerability advisories · 2026.10.25

PHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause

PHP / Palo Alto Networks Unit 42Original scenario illustration of office colleagues checking computer updates and a maintenance checklistIllustrationSecurity updates · 2026.10.25

Emergency .NET update supplies a previously omitted fix: check Windows application versions again

Microsoft .NET