USN-9001-2

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-9001-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json
JSON Data
https://api.osv.dev/v1/vulns/USN-9001-2
Published
2026-11-09T12:01:46Z
Modified
2026-11-09T19:15:21Z
Summary
ca-certificates update
Details

USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.

References

Affected packages

Ubuntu:Pro:18.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
202402031ubuntu0.18.04.2+esm4

Affected versions

Other
20170717
20180409
20190110~18.*
20190110~18.04.1
20201027ubuntu0.*
20201027ubuntu0.18.04.1
20210119~18.*
20210119~18.04.1
20210119~18.04.2
20211016~18.*
20211016~18.04.1
20211016ubuntu0.*
20211016ubuntu0.18.04.1
20230311ubuntu0.*
20230311ubuntu0.18.04.1
202402031ubuntu0.*
202402031ubuntu0.18.04.1+esm1
202402031ubuntu0.18.04.1+esm3

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "ca-certificates",
            "binary_version": "202402031ubuntu0.18.04.2+esm4"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:18.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"

Ubuntu:Pro:18.04:LTS / ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20180516ubuntu1~18.04.3+esm1

Affected versions

Other
20170930
20170930ubuntu1
20180516ubuntu1~18.*
20180516ubuntu1~18.04.1
20180516ubuntu1~18.04.2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20180516ubuntu1~18.04.3+esm1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:18.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"

Ubuntu:Pro:20.04:LTS / ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20240203~20.04.2ubuntu0.1~esm3

Affected versions

Other
20190110
20190110ubuntu1
20190110ubuntu1.*
20190110ubuntu1.1
20201027ubuntu0.*
20201027ubuntu0.20.04.1
20210119~20.*
20210119~20.04.1
20210119~20.04.2
20211016~20.*
20211016~20.04.1
20211016ubuntu0.*
20211016ubuntu0.20.04.1
20230311ubuntu0.*
20230311ubuntu0.20.04.1
20240203~20.*
20240203~20.04.1
20240203~20.04.1ubuntu0.1~esm2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "ca-certificates",
            "binary_version": "20240203~20.04.2ubuntu0.1~esm3"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:20.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"

Ubuntu:Pro:20.04:LTS / ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20190405ubuntu1.2~esm1

Affected versions

Other
20190405ubuntu1
20190405ubuntu1.*
20190405ubuntu1.1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20190405ubuntu1.2~esm1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:Pro:20.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-2.json"