USN-8944-2
ca-certificates update
USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates.
Original advisory details:
This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised.
In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.
What each source reports
OSV No score
ca-certificates update
USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates.
Original advisory details:
This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised.
In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.90 version of the Mozilla certificate authority bundle.
- Record
USN-8944-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:Pro:14.04:LTS |
before 20230311~14.04.1~esm3, plus listed versions 201306102013090620130906ubuntu120130906ubuntu220141019ubuntu0.14.04.1 Show 7 moreShow less20160104ubuntu0.14.04.120170717~14.04.120170717~14.04.220190110~14.04.1~esm120190110~14.04.1~esm220211016~14.04.1~esm120230311~14.04.1~esm1 |
20230311~14.04.1~esm3 |
ca-certificatesUbuntu:Pro:16.04:LTS |
before 202402031~16.04.1~esm3, plus listed versions 20150426ubuntu120160104ubuntu120170717~16.04.120170717~16.04.220190110~16.04.1 Show 7 moreShow less20201027ubuntu0.16.04.120210119~16.04.120210119~16.04.1ubuntu0.1~esm120211016~16.04.1~esm120211016~16.04.1~esm220230311~16.04.1~esm1202402031~16.04.1~esm1 |
202402031~16.04.1~esm3 |
ca-certificatesUbuntu:Pro:18.04:LTS |
before 202402031ubuntu0.18.04.1+esm3, plus listed versions 201707172018040920190110~18.04.120201027ubuntu0.18.04.120210119~18.04.1 Show 5 moreShow less20210119~18.04.220211016~18.04.120211016ubuntu0.18.04.120230311ubuntu0.18.04.1202402031ubuntu0.18.04.1+esm1 |
202402031ubuntu0.18.04.1+esm3 |
ca-certificatesUbuntu:Pro:20.04:LTS |
before 20240203~20.04.1ubuntu0.1~esm2, plus listed versions 2019011020190110ubuntu120190110ubuntu1.120201027ubuntu0.20.04.120210119~20.04.1 Show 5 moreShow less20210119~20.04.220211016~20.04.120211016ubuntu0.20.04.120230311ubuntu0.20.04.120240203~20.04.1 |
20240203~20.04.1ubuntu0.1~esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8944-2 is a vulnerability with no CVSS score yet in ca-certificates, published October 20, 2026. No source lists public exploit code. Fixed in ca-certificates 20230311~14.04.1~esm3.