USN-9036-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-9036-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-9036-1
Published
2026-11-10T16:16:25Z
Modified
2026-11-11T09:34:56Z
Summary
ca-certificates-java update
Details

It was discovered that the ca-certificates-java JKS handling was not working properly in certain system languages, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.

References

Affected packages

Ubuntu:22.04:LTS / ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20190909ubuntu1.5

Affected versions

Other
20190909
20190909ubuntu1.*
20190909ubuntu1.1
20190909ubuntu1.2
20190909ubuntu1.3
20190909ubuntu1.4

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20190909ubuntu1.5"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:22.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"

Ubuntu:24.04:LTS / ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20240118ubuntu0.24.04.2

Affected versions

Other
20230710
20240118
20240118ubuntu0.*
20240118ubuntu0.24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20240118ubuntu0.24.04.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"

Ubuntu:26.10 / ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260311ubuntu0.26.10.2

Affected versions

Other
20260311
20260311ubuntu0.*
20260311ubuntu0.26.10.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20260311ubuntu0.26.10.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:26.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"

Ubuntu:26.04:LTS / ca-certificates-java

Package

Name
ca-certificates-java
Purl
pkg:deb/ubuntu/ca-certificates-java?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260311ubuntu0.26.04.2

Affected versions

Other
20240118
20240118build1
20260311
20260311ubuntu0.*
20260311ubuntu0.26.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ca-certificates-java",
            "binary_version": "20260311ubuntu0.26.04.2"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9036-1.json"