diff --git a/changelog/updates/2025-12-08-ca-certificates-3.119-update.md b/changelog/updates/2025-12-08-ca-certificates-3.119-update.md
new file mode 100644
index 00000000000..1efcd3c3423
--- /dev/null
+++ b/changelog/updates/2025-12-08-ca-certificates-3.119-update.md
@@ -0,0 +1 @@
+- ca-certificates ([3.119](https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_119.html))
diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest
index 71eceb4f051..26a6180296f 100644
--- a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest
+++ b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/Manifest
@@ -1 +1 @@
-DIST nss-3.118.1.tar.gz 77625759 BLAKE2B 6b2f8bf0707801755b95a863eccf62f6cc9a381bf23e543ba6cff1ad41608846aa4632de6e4b7bc93b005bc43af21e32ae932e1e598ce89c2857c40a236fed6f SHA512 c031b9e200832689c8c02ac3a8327f4d8c74cb10ad1f5cefb8c6a15a469e910e3ea7bacfa617ce4c46d6e77d5a174b1fac89508c94c96e7888ee1838471ab7cc
+DIST nss-3.119.tar.gz 77633205 BLAKE2B 65a90414c0affbe3a814f26f8223f9f175a39082ae1f59699068953e9de3b9ab1bc23b28654978c5c6087310461de53df24753a8e9ef2978bbb562436799df62 SHA512 f2dc601bf6070c493e7577f4fc5d329fdefe6b1cd09e88680b39f0cd6181bbfdce4eedb67d5c612a13f7ad1e57c8de81b366b6565f9353442b4443e041df26b3
diff --git a/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.118.1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.119.ebuild
similarity index 100%
rename from sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.118.1.ebuild
rename to sdk_container/src/third_party/coreos-overlay/app-misc/ca-certificates/ca-certificates-3.119.ebuild