USN-2913-4
gnutls26 update
USN-2913-1 removed 1024-bit RSA CA certificates from the ca-certificates package. This update adds support for alternate certificate chains to the GnuTLS package to properly handle the removal.
Original advisory details:
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20160104 package, including the removal of the SPI CA and CA certificates with 1024-bit RSA keys.
What each source reports
OSV No score
gnutls26 update
USN-2913-1 removed 1024-bit RSA CA certificates from the ca-certificates package. This update adds support for alternate certificate chains to the GnuTLS package to properly handle the removal.
Original advisory details:
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20160104 package, including the removal of the SPI CA and CA certificates with 1024-bit RSA keys.
- Record
USN-2913-4- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnutls26Ubuntu:14.04:LTS |
before 2.12.23-12ubuntu2.5, plus listed versions 2.12.23-1ubuntu42.12.23-1ubuntu52.12.23-12ubuntu12.12.23-12ubuntu22.12.23-12ubuntu2.12.12.23-12ubuntu2.22.12.23-12ubuntu2.32.12.23-12ubuntu2.4 |
2.12.23-12ubuntu2.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2913-4 is a vulnerability with no CVSS score yet in gnutls26, published February 24, 2016. No source lists public exploit code. Fixed in gnutls26 2.12.23-12ubuntu2.5.