lp:ubuntu/trusty-security/nss

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

54. By Marc Deslauriers on 2014-09-09

* SECURITY UPDATE: possible arbitrary code execution via race condition
  - debian/patches/CVE-2014-1544.patch: prevent
    nssTrustDomain_AddCertsToCache from freeing the CERTCertificate
    associated with the NSSCertificate in nss/lib/pk11wrap/pk11cert.c.
  - CVE-2014-1544

53. By Marc Deslauriers on 2014-04-02

* SECURITY UPDATE: incorrect IDNA wildcard handling
  - debian/patches/CVE-2014-1492.patch: conform to RFC 6125 in
    nss/lib/certdb/certdb.c.
  - CVE-2014-1492

52. By Marc Deslauriers on 2014-02-20

* No longer ship cacert.org certificates. (LP: #1258286)
  - removed debian/patches/95_add_spi+cacert_ca_certs.patch
  - added debian/patches/95_add_spi_certs.patch

51. By Adam Conrad on 2014-01-25

debian/rules: Switch from DEB_BUILD_ARCH to DEB_HOST_ARCH to fix cross.

50. By Timo Aaltonen on 2014-01-24

control: Mark libnss3-nssdb as M-A: foreign. (LP: #1272292)

49. By Marc Deslauriers on 2014-01-23

debian/rules: create directory before creating cert database to fix
ftbfs

48. By Matthias Klose on 2014-01-06

Add x32 support. Closes: #699217.

47. By dkg on 2014-01-04

* Non-Maintainer Upload
 - ship extra NSS utilities (Closes: #701141)

46. By Mike Hommey <email address hidden> on 2013-12-15

* New upstream release.
  - Distrusts AC DG Tresor SSL CA.

45. By Mike Hommey <email address hidden> on 2013-11-16

* New upstream release.
  - Fixes CVE-2013-1741, CVE-2013-5605, CVE-2013-5606.