{"id":"USN-9036-1","summary":"ca-certificates-java update","details":"It was discovered that the ca-certificates-java JKS handling was not\nworking properly in certain system languages, resulting in CA certificates\nremoved from the system bundle not being removed from the JKS keystore.\nThis update corrects the feature and resyncs the keystore with the system\nCA certificates list.","modified":"2026-11-11T09:34:56.686400644Z","published":"2026-11-10T16:16:25Z","references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-9036-1"},{"type":"REPORT","url":"https://bugs.launchpad.net/bugs/2173752"}],"affected":[{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190909ubuntu1.5"}]}],"versions":["20190909","20190909ubuntu1.1","20190909ubuntu1.2","20190909ubuntu1.3","20190909ubuntu1.4"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"ca-certificates-java","binary_version":"20190909ubuntu1.5"}]},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:22.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240118ubuntu0.24.04.2"}]}],"versions":["20230710","20240118","20240118ubuntu0.24.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates-java","binary_version":"20240118ubuntu0.24.04.2"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260311ubuntu0.26.10.2"}]}],"versions":["20260311","20260311ubuntu0.26.10.1"],"ecosystem_specific":{"binaries":[{"binary_name":"ca-certificates-java","binary_version":"20260311ubuntu0.26.10.2"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.10","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"}},{"package":{"name":"ca-certificates-java","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260311ubuntu0.26.04.2"}]}],"versions":["20240118","20240118build1","20260311","20260311ubuntu0.26.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"ca-certificates-java","binary_version":"20260311ubuntu0.26.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json","cves_map":{"ecosystem":"Ubuntu:26.04:LTS","cves":[]}}}],"schema_version":"1.9.2"}