Home / mailings

PDF

[USN-9036-1] ca-certificates-java update

Posted on 10 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9036-1
November 10, 2026

ca-certificates-java update
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

ca-certificates-java would not properly update the JKS keystore.

Software Description:
- ca-certificates-java: Common CA certificates (JKS keystore)

Details:

It was discovered that the ca-certificates-java JKS handling was not
working properly in certain system languages, resulting in CA certificates
removed from the system bundle not being removed from the JKS keystore.
This update corrects the feature and resyncs the keystore with the system
CA certificates list.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
ca-certificates-java 20260311ubuntu0.26.10.2

Ubuntu 26.04 LTS
ca-certificates-java 20260311ubuntu0.26.04.2

Ubuntu 24.04 LTS
ca-certificates-java 20240118ubuntu0.24.04.2

Ubuntu 22.04 LTS
ca-certificates-java 20190909ubuntu1.5

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-9036-1
https://bugs.launchpad.net/bugs/2173752

Package Information:
https://launchpad.net/ubuntu/+source/ca-certificates-java/20260311ubuntu0.26.10.2
https://launchpad.net/ubuntu/+source/ca-certificates-java/20260311ubuntu0.26.04.2
https://launchpad.net/ubuntu/+source/ca-certificates-java/20240118ubuntu0.24.04.2
https://launchpad.net/ubuntu/+source/ca-certificates-java/20190909ubuntu1.5

--===============6074017870936338756==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP