Ubuntu ca-certificates update resyncs JKS after CA removals
Original title: USN-9001-1: ca-certificates update
CAs deleted from the system bundle could stay trusted in the Java JKS keystore until the resync.
Ubuntu security notice USN-9001-1 says the ca-certificates JKS integration did not remove certificates that had been removed from the system CA bundle. Those certificates could remain in the JKS keystore. The update corrects the integration and resyncs the keystore with the system CA list. No exploitation is mentioned.
- The notice identifier is USN-9001-1.
- Removed system CAs were not deleted from the JKS keystore.
- The fix resyncs the keystore with the system CA certificate list.
Impact: Removed CAs could remain trusted in the JKS keystore
| Product | Affected |
|---|---|
| Ubuntu ca-certificates | — |
- 1.Apply the USN-9001-1 ca-certificates update so the JKS keystore resyncs.
- Vendors
- Ubuntu
- Products
- ca-certificates
From the original article
It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the system bundle not being removed from the JKS keystore. This update corrects the feature and resyncs the keystore with the system CA certificates list.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.