Oct. 29, 2021 Michael Shigorin 3.55.0-alt1.2 |
- E2K: updated certdata.txt from nss-3.71; see also:
http://opennet.ru/55875; http://opennet.ru/55897 |
Sept. 6, 2020 Michael Shigorin 3.55.0-alt1.1 |
- E2K: fix ftbfs with upstream patch (bmo#1661378) and upstream-suggested
patch (bmo#1663346). |
July 30, 2020 Alexey Gladkov 3.55.0-alt1 |
- New version (3.55).
- Security fixes:
+ CVE-2020-6829, CVE-2020-12400: Replace P384 and P521 with new, verifiable implementations from Fiat-Crypto and ECCKiila.
+ CVE-2020-12401: Remove unnecessary scalar padding.
+ CVE-2020-12403: Explicitly disable multi-part ChaCha20 (which was not functioning correctly) and more strictly enforce tag length. |
June 29, 2020 Alexey Gladkov 3.54.0-alt1 |
- New version (3.54).
- Merge libnss and libnss-sysinit.
- Certificate Authority Changes:
+ Add CN = certSIGN Root CA G2
+ Add CN = e-Szigno Root CA 2017
+ Add CN = Microsoft ECC Root Certificate Authority 2017
+ Add CN = Microsoft RSA Root Certificate Authority 2017
+ Remove CN = AddTrust Class 1 CA Root
+ Remove CN = AddTrust External CA Root
+ Remove CN = LuxTrust Global Root 2
+ Remove CN = Staat der Nederlanden Root CA - G2
+ Remove CN = Symantec Class 2 Public Primary Certification Authority - G4
+ Remove CN = Symantec Class 1 Public Primary Certification Authority - G4
+ Remove CN = VeriSign Class 3 Public Primary Certification Authority - G3 |
June 24, 2020 Alexey Gladkov 3.53.0-alt4 |
- Enable an RFC3280 compliant certificate path validation library (ALT#38636). |
June 10, 2020 Alexey Gladkov 3.53.0-alt3 |
- Fix build with nss headers and -Werror=strict-prototypes (ALT#38597). |
June 8, 2020 Alexey Gladkov 3.53.0-alt2 |
- Enable NSS legacy DBM type (ALT#38590). |
June 4, 2020 Alexey Gladkov 3.53.0-alt1 |
- New version (3.53).
- Security fixes:
+ CVE-2020-12399 - Force a fixed length for DSA exponentiation |
May 6, 2020 Alexey Gladkov 3.52.0-alt1 |
- New version (3.52).
- Stop pulling in nss-pem automatically, packages that need it should depend on it. |
March 14, 2020 Alexey Gladkov 3.51.0-alt1 |
- New version (3.51). |
Feb. 14, 2020 Alexey Gladkov 3.49.2-alt1 |
- New version (3.49.2). |
Jan. 23, 2020 Alexey Gladkov 3.49.1-alt1 |
- New version (3.49.1).
- Security fixes:
+ CVE-2019-17023: Additional HRR Tests
- Certificate Authority Changes:
+ Add Entrust Root Certification Authority - G4 Cert |
Dec. 2, 2019 Alexey Gladkov 3.47.1-alt1 |
- New version (3.47.1).
- Security fixes:
+ CVE-2019-11745: EncryptUpdate should use maxout, not block size. |
Oct. 28, 2019 Alexey Gladkov 3.47.0-alt1 |
- New version (3.47).
- Update license tag. |
Sept. 10, 2019 Alexey Gladkov 3.46.0-alt1 |
- New version (3.46).
- Certificate Authority Changes:
+ Remove CN = Swisscom Root CA 2
+ Remove CN = Class 2 Primary CA
+ Remove CN = Class 2 Primary CA
+ Remove CN = Deutsche Telekom Root CA 2 |
July 11, 2019 Alexey Gladkov 3.45.0-alt1 |
- New version (3.45). |
May 22, 2019 Alexey Gladkov 3.44.0-alt1 |
- New version (3.44). |
May 14, 2019 Gleb Fotengauer-Malinovskiy 3.43.0-alt2 |
- Use %_is_lp64 macro to determine if arch is 64-bit. |
March 31, 2019 Alexey Gladkov 3.43.0-alt1 |
- New version (3.43). |
Feb. 1, 2019 Alexey Gladkov 3.42.1-alt1 |
- New version (3.42.1). |
Dec. 20, 2018 Alexey Gladkov 3.40.1-alt1 |
- New version (3.40.1). |
Nov. 12, 2018 Alexey Gladkov 3.40.0-alt1 |
- New version (3.40). |
Sept. 9, 2018 Alexey Gladkov 3.39.0-alt1 |
- New version (3.39). |
July 3, 2018 Alexey Gladkov 3.38.0-alt1 |
- New version (3.38). |
June 7, 2018 Alexey Gladkov 3.36.4-alt1 |
- New version (3.36.4). |
May 17, 2018 Alexey Gladkov 3.36.1-alt1 |
- New version (3.36.1). |
March 21, 2018 Alexey Gladkov 3.36.0-alt1 |
- New version (3.36). |
Jan. 12, 2018 Alexey Gladkov 3.34.1-alt3 |
- Fix the alteranatives file. |
Dec. 29, 2017 Alexey Gladkov 3.34.1-alt2 |
- Add the alteranatives file for libnssckbi.so.
- Add libnss-nssckbi-checkinstall subpackage. |
Dec. 23, 2017 Alexey Gladkov 3.34.1-alt1 |
- New version (3.34.1).
- Remove obsolete nss-alt-ssl-addon-certs.txt. |