USN-8944-2

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8944-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-2.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8944-2
Published
2026-10-20T21:21:42Z
Modified
2026-10-21T10:15:46Z
Summary
ca-certificates update
Details

USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates.

Original advisory details:

This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised.

In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.

References

Affected packages

Ubuntu:Pro:14.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20230311~14.04.1~esm3

Affected versions

Other
20130610
20130906
20130906ubuntu1
20130906ubuntu2
20141019ubuntu0.*
20141019ubuntu0.14.04.1
20160104ubuntu0.*
20160104ubuntu0.14.04.1
20170717~14.*
20170717~14.04.1
20170717~14.04.2
20190110~14.*
20190110~14.04.1~esm1
20190110~14.04.1~esm2
20211016~14.*
20211016~14.04.1~esm1
20230311~14.*
20230311~14.04.1~esm1

Ecosystem specific 

{
    "availability":  "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "20230311~14.04.1~esm3"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:Pro:14.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-2.json"

Ubuntu:Pro:16.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
202402031~16.04.1~esm3

Affected versions

Other
20150426ubuntu1
20160104ubuntu1
20170717~16.*
20170717~16.04.1
20170717~16.04.2
20190110~16.*
20190110~16.04.1
20201027ubuntu0.*
20201027ubuntu0.16.04.1
20210119~16.*
20210119~16.04.1
20210119~16.04.1ubuntu0.1~esm1
20211016~16.*
20211016~16.04.1~esm1
20211016~16.04.1~esm2
20230311~16.*
20230311~16.04.1~esm1
202402031~16.*
202402031~16.04.1~esm1

Ecosystem specific 

{
    "availability":  "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "202402031~16.04.1~esm3"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:Pro:16.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-2.json"

Ubuntu:Pro:18.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
202402031ubuntu0.18.04.1+esm3

Affected versions

Other
20170717
20180409
20190110~18.*
20190110~18.04.1
20201027ubuntu0.*
20201027ubuntu0.18.04.1
20210119~18.*
20210119~18.04.1
20210119~18.04.2
20211016~18.*
20211016~18.04.1
20211016ubuntu0.*
20211016ubuntu0.18.04.1
20230311ubuntu0.*
20230311ubuntu0.18.04.1
202402031ubuntu0.*
202402031ubuntu0.18.04.1+esm1

Ecosystem specific 

{
    "availability":  "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "202402031ubuntu0.18.04.1+esm3"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:Pro:18.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-2.json"

Ubuntu:Pro:20.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20240203~20.04.1ubuntu0.1~esm2

Affected versions

Other
20190110
20190110ubuntu1
20190110ubuntu1.*
20190110ubuntu1.1
20201027ubuntu0.*
20201027ubuntu0.20.04.1
20210119~20.*
20210119~20.04.1
20210119~20.04.2
20211016~20.*
20211016~20.04.1
20211016ubuntu0.*
20211016ubuntu0.20.04.1
20230311ubuntu0.*
20230311ubuntu0.20.04.1
20240203~20.*
20240203~20.04.1

Ecosystem specific 

{
    "availability":  "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "ca-certificates",
            "binary_version":  "20240203~20.04.1ubuntu0.1~esm2"
        }
    ]
}

Database specific

cves_map 
{
    "cves":  [],
    "ecosystem":  "Ubuntu:Pro:20.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8944-2.json"