nss 2:3.53.1-1ubuntu1 source package in Ubuntu

Changelog

nss (2:3.53.1-1ubuntu1) groovy; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/libnss3.links: make freebl3 available as library (LP #1744328)
    - d/control: add dh-exec to Build-Depends
    - d/rules: make mkdir tolerate debian/tmp existing (due to dh-exec)
    - Disable reading fips_enabled flag in FIPS mode. libnss is
      not a FIPS certified library. (LP #1837734)
    - Set TLSv1.2 as minimum TLS version. LP #1856428
    - Symlink chk files to fix self-verification in FIPS mode (LP #1885562)
  * Dropped changes:
    - SECURITY UPDATE: Timing attack during DSA key generation
      + debian/patches/CVE-2020-12399.patch: force a fixed length for DSA
        exponentiation in nss/lib/freebl/dsa.c.
      [ Incorporated by upstream. ]
    - SECURITY UPDATE: Side channel vulnerabilities during RSA key generation
      + debian/patches/CVE-2020-12402.patch: use constant-time GCD and
        modular inversion in nss/lib/freebl/mpi/mpi.c,
        nss/lib/freebl/mpi/mpi.h, nss/lib/freebl/mpi/mplogic.c.
      [ Incorporated by upstream. ]

nss (2:3.53.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2020-12402. Closes: #963152.

nss (2:3.53-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2020-12399. Closes: #961752.
  * debian/libnss3.symbols: Add NSS_3_53 symbol version.
  * nss/lib/freebl/Makefile, nss/lib/freebl/manifest.mn: Move seed.o back
    into freeblpriv3. bz#1642146.
  * nss/cmd/shlibsign/Makefile: Avoid infinite recursion when CHECKLOC is
    not set. bz#1642153.

nss (2:3.52-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_52 symbol version.

nss (2:3.51-1) unstable; urgency=medium

  * New upstream release.

nss (2:3.50-1) unstable; urgency=medium

  * New upstream release.

 -- Sergio Durigan Junior <email address hidden>  Fri, 17 Jul 2020 10:51:23 -0400