Broken symlinks on upgrade due to plain c_rehash call #643667

[ca-certificates.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index ab517b6bba1965cc9d1cc762b413674b3c499330..b4e956dee6affada9d93acaa9acd267f367cc4d6 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,72 @@
+ca-certificates (20111024) UNRELEASED; urgency=low
+
+  [ Steve Langasek ]
+  * sbin/update-ca-certificates: move the ca-certificates.crt bundle out of
+    the way before calling c_rehash, so that symlinks don't accidentally get
+    pointed here, breaking openssl certificate verification  LP: #854927
+
+  [ Loïc Minier ]
+  * Drop bogus c_rehash on upgrades, which caused issue when
+    ca-certificates.crt was still in place; instead, call
+    update-ca-certificates --fresh on upgrades to this version, and
+    the usual update-ca-certificates otherwise  Closes: #643667
+
+ -- Michael Shuler <michael@pbandjelly.org>  Mon, 24 Oct 2011 18:44:13 -0500
+
+ca-certificates (20111023) unstable; urgency=low
+
+  * Add 3.0 (native) source format
+  * Add Vcs-Git/Browser fields
+  * Add myself as new Maintainer with Uploaders  Closes: #588219
+  * Update mozilla/certdata.txt to latest (NSS branch version 1.64.2.13)
+    Certificates added (+) and removed (-):
+    + "AffirmTrust Commercial"
+    + "AffirmTrust Networking"
+    + "AffirmTrust Premium"
+    + "AffirmTrust Premium ECC"
+    + "A-Trust-nQual-03"
+    + "Bogus Global Trustee"
+    + "Bogus GMail"
+    + "Bogus Google"
+    + "Bogus kuix.de"
+    + "Bogus live.com"
+    + "Bogus Mozilla Addons"
+    + "Bogus Skype"
+    + "Bogus Yahoo 1"
+    + "Bogus Yahoo 2"
+    + "Bogus Yahoo 3"
+    + "Certinomis - Autorité Racine"
+    + "Certum Trusted Network CA"
+    + "Explicitly Distrust DigiNotar Cyber CA"
+    + "Explicitly Distrust DigiNotar Cyber CA 2nd"
+    + "Explicitly Distrust DigiNotar Root CA"
+    + "Explicitly Distrust DigiNotar Services 1024 CA"
+    + "Explicitly Distrusted DigiNotar PKIoverheid"
+    + "Explicitly Distrusted DigiNotar PKIoverheid G2"
+    + "Go Daddy Root Certificate Authority - G2"
+    + "Root CA Generalitat Valenciana"
+    + "Starfield Root Certificate Authority - G2"
+    + "Starfield Services Root Certificate Authority - G2"
+    + "TWCA Root Certification Authority"
+    - "AOL Time Warner Root Certification Authority 1"
+    - "AOL Time Warner Root Certification Authority 2"
+    - "DigiNotar Root CA"
+    - "Entrust.net Global Secure Personal CA"
+    - "Entrust.net Global Secure Server CA"
+    - "Entrust.net Secure Personal CA"
+    - "IPS Chained CAs root"
+    - "IPS CLASE1 root"
+    - "IPS CLASE3 root"
+    - "IPS CLASEA1 root"
+    - "IPS CLASEA3 root"
+    - "IPS Timestamping root"
+    - "Thawte Personal Freemail CA"
+    - "Thawte Time Stamping CA"
+  * "Bogus *" CAs above address Comodo MITM 03/11  Closes: #619587
+  * Update CAcert-Class 3-Subroot-certificate  Closes: #630232
+
+ -- Michael Shuler <michael@pbandjelly.org>  Sun, 23 Oct 2011 23:14:47 -0500
+
 ca-certificates (20111022) unstable; urgency=low
 
   * QA upload.