-
nss (2:3.63-1ubuntu1) hirsute; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/libnss3.links: make freebl3 available as library (LP #1744328)
- d/control: add dh-exec to Build-Depends
- d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
- Disable reading fips_enabled flag in FIPS mode. libnss is
not a FIPS certified library. (LP #1837734)
- Set TLSv1.2 as minimum TLS version. LP #1856428
- Symlink chk files to fix self-verification in FIPS mode (LP #1885562)
- debian/patches/fix-ftbfs-s390x.patch: fix some uninitialized
variable warnings and format overflows for s390x.
- debian/patches/fix-ftbfs-glibc-invalid-oob-error.patch: Disable
non-null error checking on call to getcwd since this results in an
erroneous warning that causes the build to fail otherwise
-- Gianfranco Costamagna <email address hidden> Mon, 29 Mar 2021 20:54:57 +0200
-
nss (2:3.61-1ubuntu2.1) hirsute-security; urgency=medium
* SECURITY UPDATE: heap overflow when verifying DSA/RSA-PSS DER-encoded
signatures
- debian/patches/CVE-2021-43527.patch: check signature lengths in
nss/lib/cryptohi/secvfy.c.
- CVE-2021-43527
-- Marc Deslauriers <email address hidden> Mon, 29 Nov 2021 07:15:05 -0500
-
nss (2:3.61-1ubuntu2) hirsute; urgency=medium
* No change rebuild with fixed ownership.
-- Dimitri John Ledkov <email address hidden> Tue, 16 Feb 2021 15:18:55 +0000
-
nss (2:3.61-1ubuntu1) hirsute; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/libnss3.links: make freebl3 available as library (LP #1744328)
- d/control: add dh-exec to Build-Depends
- d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
- Disable reading fips_enabled flag in FIPS mode. libnss is
not a FIPS certified library. (LP #1837734)
- Set TLSv1.2 as minimum TLS version. LP #1856428
- Symlink chk files to fix self-verification in FIPS mode (LP #1885562)
- debian/patches/fix-ftbfs-s390x.patch: fix some uninitialized
variable warnings and format overflows for s390x.
- debian/patches/fix-ftbfs-glibc-invalid-oob-error.patch: Disable
non-null error checking on call to getcwd since this results in an
erroneous warning that causes the build to fail otherwise
-- Gianfranco Costamagna <email address hidden> Tue, 09 Feb 2021 14:26:16 +0100
-
nss (2:3.60-1ubuntu1) hirsute; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/libnss3.links: make freebl3 available as library (LP #1744328)
- d/control: add dh-exec to Build-Depends
- d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
- Disable reading fips_enabled flag in FIPS mode. libnss is
not a FIPS certified library. (LP #1837734)
- Set TLSv1.2 as minimum TLS version. LP #1856428
- Symlink chk files to fix self-verification in FIPS mode (LP #1885562)
- debian/patches/fix-ftbfs-s390x.patch: fix some uninitialized
variable warnings and format overflows for s390x.
- debian/patches/fix-ftbfs-glibc-invalid-oob-error.patch: Disable
non-null error checking on call to getcwd since this results in an
erroneous warning that causes the build to fail otherwise
nss (2:3.60-1) unstable; urgency=medium
* New upstream release. Fixes: #977723.
-- Gianfranco Costamagna <email address hidden> Mon, 21 Dec 2020 09:21:07 +0100
-
nss (2:3.59-1ubuntu1) hirsute; urgency=medium
* Merge with Debian unstable. Remaining changes:
- d/libnss3.links: make freebl3 available as library (LP #1744328)
- d/control: add dh-exec to Build-Depends
- d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
- Disable reading fips_enabled flag in FIPS mode. libnss is
not a FIPS certified library. (LP #1837734)
- Set TLSv1.2 as minimum TLS version. LP #1856428
- Symlink chk files to fix self-verification in FIPS mode (LP #1885562)
- debian/patches/fix-ftbfs-s390x.patch: fix some uninitialized
variable warnings and format overflows for s390x.
- debian/patches/fix-ftbfs-glibc-invalid-oob-error.patch: Disable
non-null error checking on call to getcwd since this results in an
erroneous warning that causes the build to fail otherwise
nss (2:3.59-1) unstable; urgency=medium
* New upstream release. Fixes: #972713.
* debian/libnss3.symbols: Add NSS_3.59/NSSUTIL_3.59 symbol version.
nss (2:3.58-1) unstable; urgency=medium
* New upstream release.
* debian/libnss3.symbols: Add NSS_3_58 symbol version.
nss (2:3.56-1) unstable; urgency=medium
* New upstream release.
-- Gianfranco Costamagna <email address hidden> Sat, 28 Nov 2020 13:39:04 +0100
-
nss (2:3.55-1ubuntu4) hirsute; urgency=medium
* Chmod +x d/libnss3.links, otherwise dh-exec can't do the right job in
substituting DEB_HOST_MULTIARCH
-- Gianfranco Costamagna <email address hidden> Sat, 28 Nov 2020 13:34:53 +0100
-
nss (2:3.55-1ubuntu3) groovy; urgency=medium
* Fix FTBFS due to erroneous glibc out-of-bounds checking with gcc 10
(LP: #1897666)
- debian/patches/fix-ftbfs-glibc-invalid-oob-error.patch: Disable
non-null error checking on call to getcwd since this results in an
erroneous warning that causes the build to fail otherwise
-- Alex Murray <email address hidden> Tue, 29 Sep 2020 10:39:29 +0930
