USN-8436-1
ca-certificates update
No scoreFix available
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.86 version of the Mozilla certificate authority bundle.
What each source reports
OSV No score
ca-certificates update
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.86 version of the Mozilla certificate authority bundle.
- Record
USN-8436-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:22.04:LTS |
before 20260601~22.04.1, plus listed versions 20210119ubuntu12021101620211016ubuntu0.22.04.120230311ubuntu0.22.04.120240203~22.04.1 |
20260601~22.04.1 |
ca-certificatesUbuntu:24.04:LTS |
before 20260601~24.04.1, plus listed versions 20230311ubuntu120240203 |
20260601~24.04.1 |
ca-certificatesUbuntu:25.10 |
before 20260601~25.10.1, plus listed versions 2024122320250419 |
20260601~25.10.1 |
ca-certificatesUbuntu:26.04:LTS |
before 20260601~26.04.1, plus listed versions 2025041920250419build120260223 |
20260601~26.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8436-1 is a vulnerability with no CVSS score yet in ca-certificates, published June 16, 2026. No source lists public exploit code. Fixed in ca-certificates 20260601~22.04.1.