Broken symlinks on upgrade due to plain c_rehash call #643667

[ca-certificates.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index c92416deee9956e18db7bb6fa63b928a1e8db785..b4e956dee6affada9d93acaa9acd267f367cc4d6 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,18 @@
+ca-certificates (20111024) UNRELEASED; urgency=low
+
+  [ Steve Langasek ]
+  * sbin/update-ca-certificates: move the ca-certificates.crt bundle out of
+    the way before calling c_rehash, so that symlinks don't accidentally get
+    pointed here, breaking openssl certificate verification  LP: #854927
+
+  [ Loïc Minier ]
+  * Drop bogus c_rehash on upgrades, which caused issue when
+    ca-certificates.crt was still in place; instead, call
+    update-ca-certificates --fresh on upgrades to this version, and
+    the usual update-ca-certificates otherwise  Closes: #643667
+
+ -- Michael Shuler <michael@pbandjelly.org>  Mon, 24 Oct 2011 18:44:13 -0500
+
 ca-certificates (20111023) unstable; urgency=low
 
   * Add 3.0 (native) source format