{"id":"USN-8436-1","aliases":[],"status":"published","title":"ca-certificates update","description":"The ca-certificates package contained outdated CA certificates. This update\nrefreshes the included certificates to those contained in the 2.86 version\nof the Mozilla certificate authority bundle.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-06-16T14:34:54Z","modified":"2026-06-16T21:45:24Z","fixes":[{"ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","fixed_in":["20260601~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates","fixed_in":["20260601~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"ca-certificates","fixed_in":["20260601~25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates","fixed_in":["20260601~26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260601~22.04.1"}]}],"versions":["20210119ubuntu1","20211016","20211016ubuntu0.22.04.1","20230311ubuntu0.22.04.1","20240203~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260601~24.04.1"}]}],"versions":["20230311ubuntu1","20240203"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260601~25.10.1"}]}],"versions":["20241223","20250419"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260601~26.04.1"}]}],"versions":["20250419","20250419build1","20260223"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-8436-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/2156786","tags":["report"]}],"sources":{"osv":[{"id":"USN-8436-1","title":"ca-certificates update","description":"The ca-certificates package contained outdated CA certificates. This update\nrefreshes the included certificates to those contained in the 2.86 version\nof the Mozilla certificate authority bundle.","status":"published","published":"2026-06-16T14:34:54Z","modified":"2026-06-16T21:45:24.180510439Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}