USN-9001-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-9001-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-9001-1
Published
2026-11-05T14:46:13Z
Modified
2026-11-06T01:00:34Z
Summary
ca-certificates update
Details

It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.

References

Affected packages

Ubuntu:22.04:LTS
ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.22.04.2

Affected versions

Other
20210119ubuntu1
20211016
20211016ubuntu0.*
20211016ubuntu0.22.04.1
20230311ubuntu0.*
20230311ubuntu0.22.04.1
20240203~22.*
20240203~22.04.1
20260601~22.*
20260601~22.04.1
20260816ubuntu0.*
20260816ubuntu0.22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates",
            "binary_version": "20260816ubuntu0.22.04.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:22.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20190909ubuntu1.4

Affected versions

Other
20190909
20190909ubuntu1.*
20190909ubuntu1.1
20190909ubuntu1.2
20190909ubuntu1.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20190909ubuntu1.4"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:22.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
Ubuntu:24.04:LTS
ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.24.04.2

Affected versions

Other
20230311ubuntu1
20240203
20260601~24.*
20260601~24.04.1
20260816ubuntu0.*
20260816ubuntu0.24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates",
            "binary_version": "20260816ubuntu0.24.04.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20240118ubuntu0.24.04.1

Affected versions

Other
20230710
20240118

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20240118ubuntu0.24.04.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
Ubuntu:26.04:LTS
ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.26.04.2

Affected versions

Other
20250419
20250419build1
20260223
20260601~26.*
20260601~26.04.1
20260816ubuntu0.*
20260816ubuntu0.26.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates",
            "binary_version": "20260816ubuntu0.26.04.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260311ubuntu0.26.04.1

Affected versions

Other
20240118
20240118build1
20260311

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20260311ubuntu0.26.04.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
Ubuntu:26.10
ca-certificates

Package

Name
ca-certificates
Purl
pkg:deb/ubuntu/ca-certificates?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260816ubuntu0.26.10.2

Affected versions

Other
20260223
20260601
20260816
20260816ubuntu0.*
20260816ubuntu0.26.10.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates",
            "binary_version": "20260816ubuntu0.26.10.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:26.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"
ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260311ubuntu0.26.10.1

Affected versions

Other
20260311

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20260311ubuntu0.26.10.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:26.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9001-1.json"