p PatchFirst

USN-8944-2

USN-8944-2 · ca-certificates update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates. Original advisory details: This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised. In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • ca-certificates Ubuntu:Pro:14.04:LTS

    Versions
    • 20130610
    • 20130906
    • 20130906ubuntu1
    • 20130906ubuntu2
    • 20141019ubuntu0.14.04.1
    • 20160104ubuntu0.14.04.1
    • 20170717~14.04.1
    • 20170717~14.04.2
    • 20190110~14.04.1~esm1
    • 20190110~14.04.1~esm2
    • 20211016~14.04.1~esm1
    • 20230311~14.04.1~esm1
    Affected ranges
    • ECOSYSTEM: < 20230311~14.04.1~esm3

    Update to 20230311~14.04.1~esm3

  • ca-certificates Ubuntu:Pro:16.04:LTS

    Versions
    • 20150426ubuntu1
    • 20160104ubuntu1
    • 20170717~16.04.1
    • 20170717~16.04.2
    • 20190110~16.04.1
    • 20201027ubuntu0.16.04.1
    • 20210119~16.04.1
    • 20210119~16.04.1ubuntu0.1~esm1
    • 20211016~16.04.1~esm1
    • 20211016~16.04.1~esm2
    • 20230311~16.04.1~esm1
    • 202402031~16.04.1~esm1
    Affected ranges
    • ECOSYSTEM: < 202402031~16.04.1~esm3

    Update to 202402031~16.04.1~esm3

  • ca-certificates Ubuntu:Pro:18.04:LTS

    Versions
    • 20170717
    • 20180409
    • 20190110~18.04.1
    • 20201027ubuntu0.18.04.1
    • 20210119~18.04.1
    • 20210119~18.04.2
    • 20211016~18.04.1
    • 20211016ubuntu0.18.04.1
    • 20230311ubuntu0.18.04.1
    • 202402031ubuntu0.18.04.1+esm1
    Affected ranges
    • ECOSYSTEM: < 202402031ubuntu0.18.04.1+esm3

    Update to 202402031ubuntu0.18.04.1+esm3

  • ca-certificates Ubuntu:Pro:20.04:LTS

    Versions
    • 20190110
    • 20190110ubuntu1
    • 20190110ubuntu1.1
    • 20201027ubuntu0.20.04.1
    • 20210119~20.04.1
    • 20210119~20.04.2
    • 20211016~20.04.1
    • 20211016ubuntu0.20.04.1
    • 20230311ubuntu0.20.04.1
    • 20240203~20.04.1
    Affected ranges
    • ECOSYSTEM: < 20240203~20.04.1ubuntu0.1~esm2

    Update to 20240203~20.04.1ubuntu0.1~esm2

Original sources

Check your server →