{"id":"USN-9001-1","summary":"ca-certificates update","details":"It was discovered that the ca-certificates JKS integration was not working\nproperly, resulting in CA certificates removed from the system bundle not\nbeing removed from the JKS keystore. This update corrects the feature and\nresyncs the keystore with the system CA certificates list.","modified":"2026-11-06T01:00:34.456967474Z","published":"2026-11-05T14:46:13Z","references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-9001-1"},{"type":"REPORT","url":"https://bugs.launchpad.net/bugs/2061817"}],"affected":[{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.22.04.2"}]}],"versions":["20210119ubuntu1","20211016","20211016ubuntu0.22.04.1","20230311ubuntu0.22.04.1","20240203~22.04.1","20260601~22.04.1","20260816ubuntu0.22.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates","binary_version":"20260816ubuntu0.22.04.2"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json","cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[]}}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190909ubuntu1.4"}]}],"versions":["20190909","20190909ubuntu1.1","20190909ubuntu1.2","20190909ubuntu1.3"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates-java","binary_version":"20190909ubuntu1.4"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.24.04.2"}]}],"versions":["20230311ubuntu1","20240203","20260601~24.04.1","20260816ubuntu0.24.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates","binary_version":"20260816ubuntu0.24.04.2"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240118ubuntu0.24.04.1"}]}],"versions":["20230710","20240118"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"20240118ubuntu0.24.04.1","binary_name":"ca-certificates-java"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.10.2"}]}],"versions":["20260223","20260601","20260816","20260816ubuntu0.26.10.1"],"ecosystem_specific":{"binaries":[{"binary_version":"20260816ubuntu0.26.10.2","binary_name":"ca-certificates"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:26.10"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260311ubuntu0.26.10.1"}]}],"versions":["20260311"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates-java","binary_version":"20260311ubuntu0.26.10.1"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.10","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}},{"package":{"name":"ca-certificates","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.04.2"}]}],"versions":["20250419","20250419build1","20260223","20260601~26.04.1","20260816ubuntu0.26.04.1"],"ecosystem_specific":{"binaries":[{"binary_version":"20260816ubuntu0.26.04.2","binary_name":"ca-certificates"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260311ubuntu0.26.04.1"}]}],"versions":["20240118","20240118build1","20260311"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates-java","binary_version":"20260311ubuntu0.26.04.1"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"}}],"schema_version":"1.9.2"}