Hi, Salvatore Bonaccorso <[email protected]> (2026-10-23): > Control: severity -1 serious > Control: tags -1 + security > > Hi, > > On Thu, Oct 22, 2026 at 10:45:11AM +0200, Stian Mathiassen wrote: > > Hi, > > > > This bug is causing Java keystore to not update when updating > > ca-certificates for removing /invalidating eMudhra intermediate CA. > > > > https://lists.debian.org/debian-security-announce/2026/msg00487.html > > Yes, right, related is as well #1142266. > > Cyril, likely we can say the root cause of both are the same, should > we merge them? In any case I raise the severity of #1069251 as well.
Skimming over Arnaud's analysis, it looks like the same root cause indeed. I suppose I should have looked thoroughly through ca-certificates's bug list before investigating and filing against ca-certificates-java, but it feels like the reassign from the latter to the former could have used with an “affects” tag to leave a trace on the ca-certificates-java side. Cheers, -- Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/
signature.asc
Description: PGP signature
