nss (2:3.87.1-1+deb12u2) bookworm-security; urgency=medium

  * CVE-2026-2781

 -- Moritz Mühlenhoff <jmm@debian.org>  Wed, 25 Feb 2026 22:41:48 +0100

nss (2:3.87.1-1+deb12u1) bookworm-security; urgency=medium

  * nss: fix CVE-2024-6602, CVE-2024-6609 and CVE-2024-0743

 -- Arturo Borrero Gonzalez <arturo@debian.org>  Thu, 10 Oct 2024 21:51:11 +0200

nss (2:3.87.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2023-0767: Arbitrary memory write via PKCS 12 in NSS.

 -- Mike Hommey <glandium@debian.org>  Wed, 15 Feb 2023 09:22:38 +0900

nss (2:3.87-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Jan 2023 07:02:20 +0900

nss (2:3.85-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 16 Nov 2022 09:15:28 +0900

nss (2:3.83-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Sun, 18 Sep 2022 06:33:16 +0900

nss (2:3.82-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSSUTIL_3.82 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Aug 2022 07:00:08 +0900

nss (2:3.81-2) unstable; urgency=medium

  * debian/rules: Disable -Werror on less mainline architectures.

 -- Mike Hommey <glandium@debian.org>  Sun, 14 Aug 2022 05:45:08 +0900

nss (2:3.81-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.80 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 27 Jul 2022 10:19:59 +0900

nss (2:3.79-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.79 symbol version.
  * debian/control: Bump nspr build dependency.

 -- Mike Hommey <glandium@debian.org>  Wed, 01 Jun 2022 06:30:56 +0900

nss (2:3.77-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.77 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 Apr 2022 09:18:22 +0900

nss (2:3.75-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 09 Feb 2022 08:46:51 +0900

nss (2:3.73.1-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Fri, 17 Dec 2021 06:16:55 +0900

nss (2:3.73-1) unstable; urgency=medium

  * New upstream release.
  * Fixes MFSA-2021-51, aka CVE-2021-43527: Memory corruption via DER-encoded
    DSA and RSA-PSS signatures.

 -- Mike Hommey <glandium@debian.org>  Thu, 02 Dec 2021 06:04:31 +0900

nss (2:3.72-2) unstable; urgency=medium

  * debian/control: libnss3-dev breaks libxmlsec1-dev (<< 1.2.33-1).
    Closes: #998733.

 -- Mike Hommey <glandium@debian.org>  Fri, 12 Nov 2021 06:21:05 +0900

nss (2:3.72-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols, nss/lib/ssl/sslinfo.c, nss/lib/ssl/sslt.h,
    nss/cmd/selfserv/selfserv.c, nss/cmd/strsclnt/strsclnt.c,
    nss/cmd/tstclnt/tstclnt.c: Bump dependency version for SSL_GetChannelInfo
    symbol and remove the previous workaround. Closes: #990058.
  * debian/libnss3.lintian-overrides.in, debian/rules,
    nss/cmd/shlibsign/shlibsign.c, nss/lib/pk11wrap/pk11load.c,
    nss/lib/util/secload.c, nss/cmd/shlibsign/Makefile,
    nss/cmd/shlibsign/manifest.mn: Stop putting freebl, softokn, etc. in a
    subdirectory. It's a deviation from upstream that is causing more problems
    than it's worth keeping. Closes: #737855, #846012, #979159.
  * debian/libnss3-dev.links.in: Remove xulrunner-nss.pc.
  * debian/rules: Stop forcing xz compression.
  * debian/copyright: Add dot for continuation.
  * debian/watch: Upgrade to version 4.
  * debian/control: Upgrade Standard-Version to 4.6.0:
    - debian/rules: Build with `make -s` when DEB_BUILD_OPTIONS contains
      terse.
    - debian/control: Add Rules-Requires-Root: no.
  * debian/control: Remove conflict with libnss3-1d. The last Debian version
    with libnss3-1d was jessie, and it had a newer version anyways.
  * debian/rules: Enable all hardening options.
  * debian/libnss3-symbols: Add Build-Depends-Package in symbols file.
  * debian/*.lintian-overrides*: Remove
    copyright-refers-to-versionless-license-file lintian overrides.
  * debian/libnss3.lintian-overrides.in:
    - s/shlib-without-versioned-soname/shared-library-lacks-version/.
    - Add lacks-unversioned-link-to-shared-library overrides.
  * debian/nss-config.in, debian/rules: Ship upstream nss-config instead of
    ours. Closes: #737855, #963136.
  * debian/rules, debian/control: Always set Multi-Arch: same.
  * debian/copyright:
    - Remove commas in `Files`.
    - Add missing license name for ifparser.
    - Add missing `Copyright`.
    - Remove copyright for mkdepend, which is not in the source tree anymore.
  * debian/upstream/metadata: Add upstream bug tracking metadata.

  [ Daniel Kahn Gillmor ]
  * debian/control: correct Homepage (old URL redirects to 404)

  [ Janitor ]
  * debian/changelog: Trim trailing whitespace.
  * debian/copyright: Use secure copyright file specification URI.
  * debian/compat, debian/control:
    - Bump debhelper from deprecated 9 to 13.
    - Set debhelper-compat version in Build-Depends.
  * debian/upstream/metadata: Set upstream metadata fields: Repository.
  * debian/rules: Drop transition for old debug package migration.

 -- Mike Hommey <glandium@debian.org>  Tue, 02 Nov 2021 06:57:06 +0900

nss (2:3.70-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Sep 2021 08:31:23 +0900

nss (2:3.68-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 19 Jul 2021 06:23:39 +0900

nss (2:3.67-2) unstable; urgency=medium

  * nss/lib/ssl/sslinfo.c, nss/lib/ssl/sslt.h, nss/cmd/selfserv/selfserv.c,
    nss/cmd/strsclnt/strsclnt.c, nss/cmd/tstclnt/tstclnt.c: Make
    SSL_GetChannelInfo ABI compatible with older versions by default. Nothing
    else than NSS itself currently uses the new field. Closes: #990059.

 -- Mike Hommey <glandium@debian.org>  Mon, 05 Jul 2021 07:58:02 +0900

nss (2:3.67-1) unstable; urgency=medium

  * New upstream release. Fixes: #989410.

 -- Mike Hommey <glandium@debian.org>  Fri, 11 Jun 2021 09:58:51 +0900

nss (2:3.66-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3.65/NSS_3.66 symbol versions.

 -- Mike Hommey <glandium@debian.org>  Wed, 02 Jun 2021 05:53:44 +0900

nss (2:3.63-1) unstable; urgency=medium

  * New upstream release. Fixes: #984657.

 -- Mike Hommey <glandium@debian.org>  Wed, 24 Mar 2021 12:51:23 +0900

nss (2:3.61-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Mon, 08 Feb 2021 06:10:24 +0900

nss (2:3.60-1) unstable; urgency=medium

  * New upstream release. Fixes: #977723.

 -- Mike Hommey <glandium@debian.org>  Sun, 20 Dec 2020 06:36:28 +0900

nss (2:3.59-1) unstable; urgency=medium

  * New upstream release. Fixes: #972713.
  * debian/libnss3.symbols: Add NSS_3.59/NSSUTIL_3.59 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 18 Nov 2020 07:26:57 +0900

nss (2:3.58-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_58 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 21 Oct 2020 08:04:53 +0900

nss (2:3.56-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Thu, 03 Sep 2020 10:55:04 +0900

nss (2:3.55-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_55 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 29 Jul 2020 14:00:17 +0900

nss (2:3.53.1-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2020-12402. Closes: #963152.

 -- Mike Hommey <glandium@debian.org>  Mon, 22 Jun 2020 06:09:24 +0900

nss (2:3.53-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2020-12399. Closes: #961752.
  * debian/libnss3.symbols: Add NSS_3_53 symbol version.
  * nss/lib/freebl/Makefile, nss/lib/freebl/manifest.mn: Move seed.o back
    into freeblpriv3. bz#1642146.
  * nss/cmd/shlibsign/Makefile: Avoid infinite recursion when CHECKLOC is
    not set. bz#1642153.

 -- Mike Hommey <glandium@debian.org>  Sun, 31 May 2020 06:32:53 +0900

nss (2:3.52-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_52 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 06 May 2020 06:06:43 +0900

nss (2:3.51-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 08 Apr 2020 11:14:44 +0900

nss (2:3.50-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Hommey <glandium@debian.org>  Wed, 12 Feb 2020 09:06:51 +0900

nss (2:3.49.1-1) unstable; urgency=medium

  * New upstream release.
  * nss/lib/freebl/Makefile: Revert change from 2:3.48-1.
  * nss/coreconf/config.gypi, nss/lib/freebl/Makefile,
    nss/lib/freebl/aes-armv8.c, nss/lib/freebl/freebl.gyp,
    nss/lib/freebl/gcm-arm32-neon.c, nss/lib/freebl/gcm.c,
    nss/lib/freebl/rijndael.c: Fix freebl arm NEON code use, fixing FTBFS
    on armhf, and enabling runtime detection of NEON on armel. bz#1608327

 -- Mike Hommey <glandium@debian.org>  Wed, 22 Jan 2020 15:13:40 +0900

nss (2:3.49-1) unstable; urgency=medium

  * New upstream release.
  * Fixes CVE-2019-17023.

 -- Mike Hommey <glandium@debian.org>  Thu, 09 Jan 2020 13:46:11 +0900

nss (2:3.48-1) unstable; urgency=medium

  * New upstream release. Closes: #947131.
  * debian/control: Bump nspr build dependency to 4.24.
  * nss/lib/freebl/Makefile: Disable hardware AES on ARM softfloat to fix
    FTBFS on armel. Closes: #947246.

 -- Mike Hommey <glandium@debian.org>  Sun, 29 Dec 2019 07:40:46 +0900

nss (2:3.47.1-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2019-11745.

 -- Mike Hommey <glandium@debian.org>  Wed, 04 Dec 2019 09:00:54 +0900

nss (2:3.47-1) unstable; urgency=medium

  * New upstream release.
  * debian/libnss3.symbols: Add NSS_3_47 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 23 Oct 2019 11:19:59 +0900

nss (2:3.45-1) unstable; urgency=medium

  * New upstream release.
    - Fixes CVE-2019-11727 and CVE-2019-11719.
  * debian/libnss3.symbols: Add NSS_3_45 symbol version.

 -- Mike Hommey <glandium@debian.org>  Wed, 10 Jul 2019 07:34:18 +0900

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libnss3-dev`.
