Skip to content
OpenAdvisories
Unscored USN-9001-1 0 CVEs

ca-certificates update

Published Nov 5, 2026 · Updated Nov 6, 2026

Summary

It was discovered that the ca-certificates JKS integration was not working
properly, resulting in CA certificates removed from the system bundle not
being removed from the JKS keystore. This update corrects the feature and
resyncs the keystore with the system CA certificates list.

Fixed packages 8

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS ca-certificates 20260816ubuntu0.22.04.2
Ubuntu · 22.04 LTS 22.04:LTS ca-certificates-java 20190909ubuntu1.4
Ubuntu · 24.04 LTS 24.04:LTS ca-certificates 20260816ubuntu0.24.04.2
Ubuntu · 24.04 LTS 24.04:LTS ca-certificates-java 20240118ubuntu0.24.04.1
Ubuntu · 26.04 LTS 26.04:LTS ca-certificates 20260816ubuntu0.26.04.2
Ubuntu · 26.04 LTS 26.04:LTS ca-certificates-java 20260311ubuntu0.26.04.1
Ubuntu · 26.10 ca-certificates 20260816ubuntu0.26.10.2
Ubuntu · 26.10 ca-certificates-java 20260311ubuntu0.26.10.1

References

  • report
    https://bugs.launchpad.net/bugs/2061817