Would it be possible to consider a temporary fix[1] until all relevant openjdk packages are updated? [1] https://salsa.debian.org/java-team/ca-certificates-java/-/merge_requests/8