USN-5089-2
ca-certificates update
USN-5089-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connectivity issues. This update removes the “DST Root CA X3” CA.
What each source reports
OSV No score
ca-certificates update
USN-5089-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connectivity issues. This update removes the “DST Root CA X3” CA.
- Record
USN-5089-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:Pro:14.04:LTS |
before 20190110~14.04.1~esm2, plus listed versions 201306102013090620130906ubuntu120130906ubuntu220141019ubuntu0.14.04.1 Show 4 moreShow less20160104ubuntu0.14.04.120170717~14.04.120170717~14.04.220190110~14.04.1~esm1 |
20190110~14.04.1~esm2 |
ca-certificatesUbuntu:Pro:16.04:LTS |
before 20210119~16.04.1ubuntu0.1~esm1, plus listed versions 20150426ubuntu120160104ubuntu120170717~16.04.120170717~16.04.220190110~16.04.120201027ubuntu0.16.04.120210119~16.04.1 |
20210119~16.04.1ubuntu0.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-5089-2 is a vulnerability with no CVSS score yet in ca-certificates, published September 23, 2021. No source lists public exploit code. Fixed in ca-certificates 20190110~14.04.1~esm2.