Ca-Certificates Update — Ubuntu Security Update (USN-9001-2)
USN-9001-2 is a follow-up to USN-9001-1: the certificate authority bundle update (ca-certificates) needed a correction, and this notice delivers it for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Keep current with ca-certificates updates on every server — they underpin every TLS connection the box makes.
-
USN-9001-2
Publication date
9 November 2026
Overview
ca-certificates would not properly update the JKS keystore.
Releases
Packages
- ca-certificates – Common CA certificates
- ca-certificates-java – Common CA certificates (JKS keystore)
Details
USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java.
This update provides the corresponding fix for Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that the ca-certificates JKS integration was not working
properly, resulting in CA certificates removed from the system bundle not
being removed from the JKS keystore. This update corrects the feature and
resyncs the keystore with the system CA certificates list.
USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java.
This update provides the corresponding fix for Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that the ca-certificates JKS integration was not working
properly, resulting in CA certificates removed from the system bundle not
being removed from the JKS keystore. This update corrects the feature and
resyncs the keystore with the system CA certificates list.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
|
20.04
LTS focal |
ca-certificates –
20240203~20.04.2ubuntu0.1~esm3 Ubuntu Pro |
||
|
ca-certificates-java –
20190405ubuntu1.2~esm1 Ubuntu Pro |
|||
|
18.04
LTS bionic |
ca-certificates –
202402031ubuntu0.18.04.2+esm4 Ubuntu Pro |
||
|
ca-certificates-java –
20180516ubuntu1~18.04.3+esm1 Ubuntu Pro |
|||
References
संदर्भ
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें