USN-4377-1
ca-certificates update
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA.
In addition, on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update refreshes the included certificates to those contained in the 20190110 package.
What each source reports
OSV No score
ca-certificates update
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA.
In addition, on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update refreshes the included certificates to those contained in the 20190110 package.
- Record
USN-4377-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:16.04:LTS |
before 20190110~16.04.1, plus listed versions 20150426ubuntu120160104ubuntu120170717~16.04.120170717~16.04.2 |
20190110~16.04.1 |
ca-certificatesUbuntu:18.04:LTS |
before 20190110~18.04.1, plus listed versions 2017071720180409 |
20190110~18.04.1 |
ca-certificatesUbuntu:20.04:LTS |
before 20190110ubuntu1.1, plus listed versions 2019011020190110ubuntu1 |
20190110ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4377-1 is a vulnerability with no CVSS score yet in ca-certificates, published June 1, 2020. No source lists public exploit code. Fixed in ca-certificates 20190110~16.04.1.