Do not try to use "mktemp --tmpdir" in the update-ca-certificates script. This broke upgrading, as the script gets executed during post-upgrade. Related: 66951d3b45 Related: SYS#5283
66951d3b45