When upgrading ca-certificates from lenny to squeeze, one of the
previous ca-certificates NEWS entries mentions the addition of the
DigiNotar root CA. The squeeze update to ca-certificates that removes
DigiNotar does not include a corresponding NEWS entry. As a result,
people upgrading from lenny to squeeze and using apt-listchanges see
NEWS entries which note the addition of DigiNotar and not its removal.
In my case this led me to wonder whether the version I upgraded to still
had the DigiNotar certificate, and manually dig through the changelog to
The squeeze update for ca-certificates should have a NEWS entry noting
the removed certificate.