USN-9001-1
ca-certificates update
It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.
What each source reports
OSV No score
ca-certificates update
It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.
- Record
USN-9001-1- Updated
- 2026-11-06
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ca-certificatesUbuntu:22.04:LTS |
before 20260816ubuntu0.22.04.2, plus listed versions 20210119ubuntu12021101620211016ubuntu0.22.04.120230311ubuntu0.22.04.120240203~22.04.120260601~22.04.120260816ubuntu0.22.04.1 |
20260816ubuntu0.22.04.2 |
ca-certificates-javaUbuntu:22.04:LTS |
before 20190909ubuntu1.4, plus listed versions 2019090920190909ubuntu1.120190909ubuntu1.220190909ubuntu1.3 |
20190909ubuntu1.4 |
ca-certificatesUbuntu:24.04:LTS |
before 20260816ubuntu0.24.04.2, plus listed versions 20230311ubuntu12024020320260601~24.04.120260816ubuntu0.24.04.1 |
20260816ubuntu0.24.04.2 |
ca-certificates-javaUbuntu:24.04:LTS |
before 20240118ubuntu0.24.04.1, plus listed versions 2023071020240118 |
20240118ubuntu0.24.04.1 |
ca-certificatesUbuntu:26.10 |
before 20260816ubuntu0.26.10.2, plus listed versions 20260223202606012026081620260816ubuntu0.26.10.1 |
20260816ubuntu0.26.10.2 |
ca-certificates-javaUbuntu:26.10 |
before 20260311ubuntu0.26.10.1, plus listed versions 20260311 |
20260311ubuntu0.26.10.1 |
ca-certificatesUbuntu:26.04:LTS |
before 20260816ubuntu0.26.04.2, plus listed versions 2025041920250419build12026022320260601~26.04.120260816ubuntu0.26.04.1 |
20260816ubuntu0.26.04.2 |
ca-certificates-javaUbuntu:26.04:LTS |
before 20260311ubuntu0.26.04.1, plus listed versions 2024011820240118build120260311 |
20260311ubuntu0.26.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-9001-1 is a vulnerability with no CVSS score yet in ca-certificates, published November 5, 2026. No source lists public exploit code. Fixed in ca-certificates 20260816ubuntu0.22.04.2.