Bug#806239: ca-certificates: Contains unaudited root CAs

2015-11-25 Thread Michael Shuler
On 11/25/2015 03:13 PM, Andrew Ayer wrote: >> The April release contained the 2.4 bundle from Mozilla. CA bundle 2.5 >> was recently released in NSS and an upload to unstable is being >> prepped. I was incorrect about the NSS release relative time being as recent as I recalled. See below. > I'm n

Bug#806239: ca-certificates: Contains unaudited root CAs

2015-11-25 Thread Andrew Ayer
Hi Michael, On Wed, 25 Nov 2015 12:30:18 -0600 Michael Shuler wrote: > Control: tags -1 + pending > > On 11/25/2015 11:28 AM, Andrew Ayer wrote: > > ca-certificates hasn't been updated since April 2015. Since then, > > 14 CAs have been removed from the NSS root store[1, 2]. > > ca-certificates

Bug#806239: ca-certificates: Contains unaudited root CAs

2015-11-25 Thread Michael Shuler
Control: tags -1 + pending On 11/25/2015 11:28 AM, Andrew Ayer wrote: > ca-certificates hasn't been updated since April 2015. Since then, 14 > CAs have been removed from the NSS root store[1, 2]. ca-certificates in > stable hasn't been updated since October 2014. Since then, 6 additional > CAs

Bug#806239: ca-certificates: Contains unaudited root CAs

2015-11-25 Thread Andrew Ayer
Package: ca-certificates Version: 20150426 Severity: important Dear maintainer and security team, ca-certificates hasn't been updated since April 2015. Since then, 14 CAs have been removed from the NSS root store[1, 2]. ca-certificates in stable hasn't been updated since October 2014. Since th