Back to Security Advisories

Ca-Certificates Update — Ubuntu Security Update (USN-9001-2)

USN-9001-2 is a follow-up to USN-9001-1: the certificate authority bundle update (ca-certificates) needed a correction, and this notice delivers it for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Keep current with ca-certificates updates on every server — they underpin every TLS connection the box makes.

High
Ubuntu 20.04 Ubuntu 22.04

  1. Ubuntu Security Notices

  2. USN-9001-2

Publication date

9 November 2026

Overview

ca-certificates would not properly update the JKS keystore.

Releases


20.04 LTS


18.04 LTS

Packages

Details

USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java.
This update provides the corresponding fix for Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that the ca-certificates JKS integration was not working
properly, resulting in CA certificates removed from the system bundle not
being removed from the JKS keystore. This update corrects the feature and
resyncs the keystore with the system CA certificates list.

USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java.
This update provides the corresponding fix for Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that the ca-certificates JKS integration was not working
properly, resulting in CA certificates removed from the system bundle not
being removed from the JKS keystore. This update corrects the feature and
resyncs the keystore with the system CA certificates list.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
20.04

LTS focal

 ca-certificates – 

20240203~20.04.2ubuntu0.1~esm3

Ubuntu Pro
Fix available with Ubuntu Pro.
ca-certificates-java – 

20190405ubuntu1.2~esm1

Ubuntu Pro
Fix available with Ubuntu Pro.
18.04

LTS bionic

 ca-certificates – 

202402031ubuntu0.18.04.2+esm4

Ubuntu Pro
Fix available with Ubuntu Pro.
ca-certificates-java – 

20180516ubuntu1~18.04.3+esm1

Ubuntu Pro
Fix available with Ubuntu Pro.

References

References

Security Advisories

Related Advisories

Tornado Regression — Ubuntu Security Update (USN-8952-3)

2026-11-11

Linux Kernel (Azure CVM) Vulnerabilities — Ubuntu Security Update (USN-9039-1)

2026-11-11

Linux Kernel (Low Latency NVIDIA) Vulnerabilities — Ubuntu Security Update (USN-9040-1)

2026-11-11

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System