USN-4377-2
ca-certificates update
USN-4377-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA.
In addition, on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM, this update refreshes the included certificates to those contained in the 20190110 package.
What each source reports
OSV No score
ca-certificates update
USN-4377-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA.
In addition, on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM, this update refreshes the included certificates to those contained in the 20190110 package.
- Record
USN-4377-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:Pro:14.04:LTS |
before 20190110~14.04.1~esm1, plus listed versions 201306102013090620130906ubuntu120130906ubuntu220141019ubuntu0.14.04.120160104ubuntu0.14.04.120170717~14.04.120170717~14.04.2 |
20190110~14.04.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4377-2 is a vulnerability with no CVSS score yet in ca-certificates, published June 1, 2020. No source lists public exploit code. Fixed in ca-certificates 20190110~14.04.1~esm1.