Bug#962596: Divergence in Symantec CA blacklist reverting between sid and *stable?

[Thorsten Glaser]

Hi,

the changelogs seem to differ in re-added certificates:

 ca-certificates (20210119) unstable; urgency=medium

   [ Michael Shuler ]
   * mozilla/blacklist:
     Revert Symantec CA blacklist (#911289). Closes: #962596
     The following root certificates were added back (+):
     + "GeoTrust Primary Certification Authority - G2"
     + "VeriSign Universal Root Certification Authority"

 ca-certificates (20200601~deb10u2) buster; urgency=medium

   [ Michael Shuler ]
   * mozilla/blacklist:
     Revert Symantec CA blacklist (#911289). Closes: #962596, #968002.
     The following root certificates were added back (+):
     + "GeoTrust Global CA"
     + "GeoTrust Primary Certification Authority"
     + "GeoTrust Primary Certification Authority - G2"
     + "GeoTrust Primary Certification Authority - G3"
     + "GeoTrust Universal CA"
     + "thawte Primary Root CA"
     + "thawte Primary Root CA - G2"
     + "thawte Primary Root CA - G3"
     + "VeriSign Class 3 Public Primary Certification Authority - G4"
     + "VeriSign Class 3 Public Primary Certification Authority - G5"
     + "VeriSign Universal Root Certification Authority"

 ca-certificates (20200601~deb9u2) stretch-security; urgency=high

   * mozilla/blacklist:
     Revert Symantec CA blacklist (#911289). Closes: #962596
     The following root certificates were added back (+):
     + "GeoTrust Global CA"
     + "GeoTrust Primary Certification Authority"
     + "GeoTrust Primary Certification Authority - G2"
     + "GeoTrust Primary Certification Authority - G3"
     + "GeoTrust Universal CA"
     + "thawte Primary Root CA"
     + "thawte Primary Root CA - G2"
     + "thawte Primary Root CA - G3"
     + "VeriSign Class 3 Public Primary Certification Authority - G4"
     + "VeriSign Class 3 Public Primary Certification Authority - G5"
     + "VeriSign Universal Root Certification Authority"

So, which is correct?

Thanks in advance,
//mirabilos
-- 
<ch> you introduced a merge commit        │<mika> % g rebase -i HEAD^^
<mika> sorry, no idea and rebasing just fscked │<mika> Segmentation
<ch> should have cloned into a clean repo      │  fault (core dumped)
<ch> if I rebase that now, it's really ugh     │<mika:#grml> wuahhhhhh