{"id":"USN-9001-2","summary":"ca-certificates update","details":"USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java.\nThis update provides the corresponding fix for Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that the ca-certificates JKS integration was not working\n properly, resulting in CA certificates removed from the system bundle not\n being removed from the JKS keystore. This update corrects the feature and\n resyncs the keystore with the system CA certificates list.","modified":"2026-11-09T19:15:21.009551150Z","published":"2026-11-09T12:01:46Z","references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-9001-2"},{"type":"REPORT","url":"https://bugs.launchpad.net/bugs/2061817"}],"affected":[{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202402031ubuntu0.18.04.2+esm4"}]}],"versions":["20170717","20180409","20190110~18.04.1","20201027ubuntu0.18.04.1","20210119~18.04.1","20210119~18.04.2","20211016~18.04.1","20211016ubuntu0.18.04.1","20230311ubuntu0.18.04.1","202402031ubuntu0.18.04.1+esm1","202402031ubuntu0.18.04.1+esm3"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates","binary_version":"202402031ubuntu0.18.04.2+esm4"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:Pro:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180516ubuntu1~18.04.3+esm1"}]}],"versions":["20170930","20170930ubuntu1","20180516ubuntu1~18.04.1","20180516ubuntu1~18.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates-java","binary_version":"20180516ubuntu1~18.04.3+esm1"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240203~20.04.2ubuntu0.1~esm3"}]}],"versions":["20190110","20190110ubuntu1","20190110ubuntu1.1","20201027ubuntu0.20.04.1","20210119~20.04.1","20210119~20.04.2","20211016~20.04.1","20211016ubuntu0.20.04.1","20230311ubuntu0.20.04.1","20240203~20.04.1","20240203~20.04.1ubuntu0.1~esm2"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"ca-certificates","binary_version":"20240203~20.04.2ubuntu0.1~esm3"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:20.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=esm-infra%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190405ubuntu1.2~esm1"}]}],"versions":["20190405ubuntu1","20190405ubuntu1.1"],"ecosystem_specific":{"binaries":[{"binary_version":"20190405ubuntu1.2~esm1","binary_name":"ca-certificates-java"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:20.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"}}],"schema_version":"1.9.2"}