Sync updates from Debian Buster
ca-certificates (20200601~deb10u2) buster; urgency=medium
[ Julien Cristau ]
- New maintainer (see #976406)
[ Michael Shuler ]
- mozilla/blacklist:
Revert Symantec CA blacklist (#911289). Closes: #962596, #968002.
The following root certificates were added back (+):
- "GeoTrust Global CA"
- "GeoTrust Primary Certification Authority"
- "GeoTrust Primary Certification Authority - G2"
- "GeoTrust Primary Certification Authority - G3"
- "GeoTrust Universal CA"
- "thawte Primary Root CA"
- "thawte Primary Root CA - G2"
- "thawte Primary Root CA - G3"
- "VeriSign Class 3 Public Primary Certification Authority - G4"
- "VeriSign Class 3 Public Primary Certification Authority - G5"
- "VeriSign Universal Root Certification Authority"
Note: due to bug #743339, CA certificates added back in this version won't automatically be trusted again on upgrade. Affected users may need to reconfigure the package to restore the desired state.