USN-8944-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8944-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8944-1
Published
2026-10-20T15:52:06Z
Modified
2026-10-20T22:45:16Z
Summary
ca-certificates update
Details

This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised.

In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.

References

Affected packages

Ubuntu:22.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.22.04.1

Affected versions

Other
20210119ubuntu1
20211016
20211016ubuntu0.*
20211016ubuntu0.22.04.1
20230311ubuntu0.*
20230311ubuntu0.22.04.1
20240203~22.*
20240203~22.04.1
20260601~22.*
20260601~22.04.1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "20260816ubuntu0.22.04.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:22.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"

Ubuntu:24.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.24.04.1

Affected versions

Other
20230311ubuntu1
20240203
20260601~24.*
20260601~24.04.1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "20260816ubuntu0.24.04.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"

Ubuntu:26.10 / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.26.10.1

Affected versions

Other
20260223
20260601
20260816

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "20260816ubuntu0.26.10.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:26.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"

Ubuntu:26.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.26.04.1

Affected versions

Other
20250419
20250419build1
20260223
20260601~26.*
20260601~26.04.1

Ecosystem specific 

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "20260816ubuntu0.26.04.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-1.json"