lp://qastaging/ubuntu/raring-security/nss

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

44. By Marc Deslauriers on 2013-12-20

* SECURITY UPDATE: New upstream release (LP: #1263135)
  - Distrusts AC DG Tresor SSL CA

43. By Marc Deslauriers on 2013-11-14

* SECURITY UPDATE: New upstream release to fix multiple security issues
  and add TLSv1.2 support.
  - CVE-2013-1739
  - CVE-2013-1741
  - CVE-2013-5605
  - CVE-2013-5606
* Adjusted packaging for 3.15.3:
  - debian/patches/*: refreshed.
  - debian/patches/lower-dhe-priority.patch: removed, no longer needed,
    was a workaround for an old version of firefox.
  - debian/libnss3.symbols: added new symbols.
  - debian/rules: updated for new source layout.

42. By Jamie Strandboge on 2013-03-13

* New upstream release with merged changes from Debian unstable for
  2:3.14.2-1. Remaining changes:
  - control: Change Vcs-* to XS-Debian-Vcs-*.
  - rules: Include libnssb.a and libnssckfw.a in the -dev package.
* debian/libnss3.symbols: add NSS_3.14.3 symbols

41. By Jamie Strandboge on 2013-01-14

* Merge from Debian unstable. Remaining changes:
  - control: Change Vcs-* to XS-Debian-Vcs-*.
  - rules: Include libnssb.a and libnssckfw.a in the -dev package.

40. By Timo Aaltonen on 2012-11-27

* Merge from Debian unstable. Remaining changes:
  - control: Change Vcs-* to XS-Debian-Vcs-*.
  - rules: Include libnssb.a and libnssckfw.a in the -dev package.

39. By Marc Deslauriers on 2012-08-16

* SECURITY UPDATE: denial of service in QuickDER decoder
  - debian/patches/CVE-2012-0441.patch: properly handle zero-length basic
    constraints and zero-length fields in
    nss/mozilla/security/nss/lib/softoken/legacydb/keydb.c,
    nss/mozilla/security/nss/lib/softoken/legacydb/lgcreate.c,
    nss/mozilla/security/nss/lib/softoken/legacydb/lowkey.c,
    nss/mozilla/security/nss/lib/softoken/legacydb/lowkeyti.h,
    nss/mozilla/security/nss/lib/util/quickder.c.
  - CVE-2012-0441

38. By Timo Aaltonen on 2012-02-27

Add protect-against-calls-before-nss_init.patch (RHBZ #784672).

37. By Timo Aaltonen on 2012-02-19

Include libnssckfw.a in the -dev package, also needed by
mod_revocator.

36. By Timo Aaltonen on 2012-02-19

Include libnssb.a in the -dev package, needed by mod_revocator.

35. By Chris Coulson on 2012-01-12

* Fix LP: #915069 - Add patch from upstream to fix an error in pkcs11n.h
  - add debian/patches/98_fix_header_error.patch
  - update debian/patches/series