ca-certificates update
Affects ca-certificatesSource GCVE Database
Fixed in 20260816ubuntu0.22.04.2 : update ca-certificates when convenient.
Data as of 6 Nov 2026, 04:05 UTC
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in 20260816ubuntu0.22.04.2, 20190909ubuntu1.4, 20260816ubuntu0.24.04.2 +5
What to do
Upgrade to a fixed release listed under Affected software.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu 26.10ca-certificatespkg:deb/ubuntu/ca-certificates?arch=source&distro=stonkingOther threats | Affected
| Fixed in
|
Ubuntu 26.10ca-certificates-javapkg:deb/ubuntu/ca-certificates-java?arch=source&distro=stonkingOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSca-certificatespkg:deb/ubuntu/ca-certificates?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSca-certificates-javapkg:deb/ubuntu/ca-certificates-java?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 24.04 LTSca-certificatespkg:deb/ubuntu/ca-certificates?arch=source&distro=nobleOther threats | Affected
| Fixed in
|
Ubuntu 24.04 LTSca-certificates-javapkg:deb/ubuntu/ca-certificates-java?arch=source&distro=nobleOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and should be applied. The fixed versions are listed and can be found in the Ubuntu security notice USN-9001-1. Users should update to these fixed package versions to ensure proper synchronization of CA certificates in the JKS keystore.
Description
A flaw in the ca-certificates package caused the Java KeyStore (JKS) integration to malfunction, where CA certificates removed from the system bundle were not removed from the JKS keystore. This update fixes the issue by properly syncing the keystore with the system CA certificates list.