USN-5089-1
ca-certificates update
No scoreFix available
The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connectivity issues. This update removes the “DST Root CA X3” CA.
What each source reports
OSV No score
ca-certificates update
The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connectivity issues. This update removes the “DST Root CA X3” CA.
- Record
USN-5089-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:18.04:LTS |
before 20210119~18.04.2, plus listed versions 201707172018040920190110~18.04.120201027ubuntu0.18.04.120210119~18.04.1 |
20210119~18.04.2 |
ca-certificatesUbuntu:20.04:LTS |
before 20210119~20.04.2, plus listed versions 2019011020190110ubuntu120190110ubuntu1.120201027ubuntu0.20.04.120210119~20.04.1 |
20210119~20.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-5089-1 is a vulnerability with no CVSS score yet in ca-certificates, published September 23, 2021. No source lists public exploit code. Fixed in ca-certificates 20210119~18.04.2.