{"id":"USN-9001-1","aliases":[],"status":"published","title":"ca-certificates update","description":"It was discovered that the ca-certificates JKS integration was not working\nproperly, resulting in CA certificates removed from the system bundle not\nbeing removed from the JKS keystore. This update corrects the feature and\nresyncs the keystore with the system CA certificates list.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-11-05T14:46:13Z","modified":"2026-11-06T01:00:34Z","fixes":[{"ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","fixed_in":["20260816ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates-java","fixed_in":["20190909ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates","fixed_in":["20260816ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates-java","fixed_in":["20240118ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"ca-certificates","fixed_in":["20260816ubuntu0.26.10.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"ca-certificates-java","fixed_in":["20260311ubuntu0.26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates","fixed_in":["20260816ubuntu0.26.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates-java","fixed_in":["20260311ubuntu0.26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.22.04.2"}]}],"versions":["20210119ubuntu1","20211016","20211016ubuntu0.22.04.1","20230311ubuntu0.22.04.1","20240203~22.04.1","20260601~22.04.1","20260816ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ca-certificates-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20190909ubuntu1.4"}]}],"versions":["20190909","20190909ubuntu1.1","20190909ubuntu1.2","20190909ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.24.04.2"}]}],"versions":["20230311ubuntu1","20240203","20260601~24.04.1","20260816ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ca-certificates-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240118ubuntu0.24.04.1"}]}],"versions":["20230710","20240118"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.10.2"}]}],"versions":["20260223","20260601","20260816","20260816ubuntu0.26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ca-certificates-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260311ubuntu0.26.10.1"}]}],"versions":["20260311"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260816ubuntu0.26.04.2"}]}],"versions":["20250419","20250419build1","20260223","20260601~26.04.1","20260816ubuntu0.26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ca-certificates-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260311ubuntu0.26.04.1"}]}],"versions":["20240118","20240118build1","20260311"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-9001-1","tags":["advisory"]},{"url":"https://bugs.launchpad.net/bugs/2061817","tags":["report"]}],"sources":{"osv":[{"id":"USN-9001-1","title":"ca-certificates update","description":"It was discovered that the ca-certificates JKS integration was not working\nproperly, resulting in CA certificates removed from the system bundle not\nbeing removed from the JKS keystore. This update corrects the feature and\nresyncs the keystore with the system CA certificates list.","status":"published","published":"2026-11-05T14:46:13Z","modified":"2026-11-06T01:00:34.456967474Z","updated_at":"2026-11-06T01:33:05.666804Z"}]}}