Skip to main content
VulnerabilityPublished

ca-certificates update

Affects ca-certificatesSource GCVE Database

0

Fixed in 202402031ubuntu0.18.04.2+esm4 : update ca-certificates when convenient.

Data as of 9 Nov 2026, 22:21 UTC

Severity
Unrated

Rated by Threat Radar

Patch
Available – fixed in 202402031ubuntu0.18.04.2+esm4, 20180516ubuntu1~18.04.3+esm1, 20240203~20.04.2ubuntu0.1~esm3 +1

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
Ubuntu Pro 20.04 LTSca-certificatespkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra/focalOther threatsAffected
  • <20240203~20.04.2ubuntu0.1~esm3
Fixed in
  • 20240203~20.04.2ubuntu0.1~esm3
Ubuntu Pro 20.04 LTSca-certificates-javapkg:deb/ubuntu/ca-certificates-java?arch=source&distro=esm-infra/focalOther threatsAffected
  • <20190405ubuntu1.2~esm1
Fixed in
  • 20190405ubuntu1.2~esm1
Ubuntu Pro 18.04 LTSca-certificatespkg:deb/ubuntu/ca-certificates?arch=source&distro=esm-infra/bionicOther threatsAffected
  • <202402031ubuntu0.18.04.2+esm4
Fixed in
  • 202402031ubuntu0.18.04.2+esm4
Ubuntu Pro 18.04 LTSca-certificates-javapkg:deb/ubuntu/ca-certificates-java?arch=source&distro=esm-infra/bionicOther threatsAffected
  • <20180516ubuntu1~18.04.3+esm1
Fixed in
  • 20180516ubuntu1~18.04.3+esm1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

USN-9001-1 fixed a vulnerability in ca-certificates, ca-certificates-java. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.

References

Community reviews

Loading reviews…